MAL-2025-86410 Malicious code in hendra-menjes97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37833adbf8edec3c4470112ddb5e24ef8acbcdefa2d8694930054198a07311af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84841 Malicious code in eka-dodol16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edfd6ab1715a411f4d329a4d72ad596719d9c36d48a1745ecc84f6392d11c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91848 Malicious code in vida-serabi74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba4541db4a42545efd5707f0ce73a08d037e83338422c59ede768565f1f7466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-sate73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d66d652ffaf76ff0e0deaa1eabaef06d8ac42bb0ac6b49b67b82ed214c181c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79276 Malicious code in joko-tomat3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da593a0005248cddb5b2d7509c5a43ddea68d7e2c0fa4c40465913291bfc451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9845c19893bdd561a66091cb0995d9de7ffda5b55e976579424d8e692932e1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-martabak90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a5696f1d5c93c4961b1395512e76a21b2aff21bd693ba9cde9880a21984de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67535 Malicious code in creepy-plum-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8baa38f4a48ec820ae22ecaa8b008d55080de34e0981a0ad78fc09d5e322a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71061 Malicious code in technological-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487d318366649ed76d5cc8596e8e1f55134125b6b58c116e0ea6979c04b3d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68878 Malicious code in inevitable-pink-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f58c93377971fa4683dd331cb9347a0c88b3fa41c691b0a5babe6c9bae64ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69609 Malicious code in neutral-olive-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea501c769ba693b95ea99f724982890bc19e4be82874d45623b21cbb7193b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-serabi75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbd10c57899fd06c4ed0e86d749fa2763afebb533f42417f7146c9c6b024063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64977 Malicious code in qori-nasipecel70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3605bd2050fa685919d7b0b61385ac2e1541de885e932dd061f628b715e8d4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65857 Malicious code in utomo-sasag98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab55e6a0fe34b5699883e1bed5daba5db408e701ab9bef210773e6af06f11e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59950 Malicious code in alive_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f21dac03da1d40a5935d9423e84410ca746ec122d7599bb1710e499ae1ff18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61348 Malicious code in stale_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317ad570a0d1a47e5f2059ea85ea680733653765fedd8ee09fa0acd0a1f65bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-gado-gado89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609d8b98fe18f39868fc0735c67d5d0ebcb868017bf89783b2e66231adfc794a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53128 Malicious code in kresna-kue59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ab5b623fd0bad21d720ff6bf80aba4af9f8f14efc518d7724e6f0c31a9df5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...