MAL-2025-131389 Malicious code in working_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b620142e931ec11871642d636a8f475ddd782bf14df3e55814530f4f144ac6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125574 Malicious code in compatible_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c618d1fcf6d7d62cdcc5b39185574814d6f6d0c62afbab2ade3518ad4ca3e34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131798 Malicious code in zeroth_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b60484007c2d667553c2a173697906ee04260b1d2598e866146cf7918b6591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-pisang53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8797c6f06930c2a862df9dae1d3beb5f1a922aaac441283e45439910a95bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lontong96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6a719421bbe9b8f9d7380ca86d8ee834290b4ad27f4c7c5d6002b291e3270d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452a3b68964d36e33e82dfa279d18e77c89c2816264cbd7c24b3d6d5bad46340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512080f32e1a68e9ff62f30764d03c52335074252581ae1dba987a9bb4c2783f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-sasag100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190deee8dc65f00bf9a31e3ce8f04632d3d3cfd256d8fd93902a32127dabfcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51280b88558730ee25bb49fb78339520798d692a8394b63ea43f5215268d202d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2484cf4d838051766dc34d347fbbd507ff5768d3c96f875f173b48af0c230edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-klentik24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d35ce42845ea58c555c6653762947d12925865811cb372f7e3a682f106fbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-lontong44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c970b9097b7e781f9a080580d02274dc9edaedf76f1d6ada9deb74d1f7f2628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c882623a6f5b7e7950da6d70e222e8d3fef111d9a1c2a002fe112cae5144cc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-telur52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167adc08575ed0b83620d4ce20386357f08b11ef8d2cbb8d6dd46c2a16605d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477c9f9a4f7c7e0c585ecb7d7274c879cebb64b5c644d86302f47845aa0d5a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2ade496e5ca03313d8749d1eb3b83708cb1f390893f45421ff00c8f796c7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managing_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4c279bf65fd47335af0149a7b9cbd6736259e6588e45b5fc055ebf015f7964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124962 Malicious code in andi-sasag87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0c0fc1f197156d47507ed270792a9d9ce42136887d0d5841df4bcf69971281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126262 Malicious code in erwin-nasi44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7224acc91a6c60489786d45e9e055ab553794c5c750f982ad34af83a8b614153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127882 Malicious code in kiki-kepok43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5979c5321bbcaea8684c31aea6022776edcca9c4f2a6eed446a2d34c79979a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...