MAL-2025-93686 Malicious code in complicated_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d741595d95f7ea9aaf7e92781c700a1f2b9efc2c9f0029e3b77191c8116d23b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94006 Malicious code in determined_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c30c25a3852dfa37d508f81e6b84210a41f0ceeff2160e65683f513d064fbecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c220fbcc4f82c3c2580e677c2303abde34564692c99d987a06839cbf9025768c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9629ec05274c01766ef5fa2ebb82e4f1e9c1cc8854c2769f07f9a11b7575d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0f25077225e2b1511bb19b0645fcafc65461cd78aaeae8b480dc832ad7fbaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338f2b0f47d59737850ad926de1860a72a00a9ef770e222a77e6e645aa4ac368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97180 Malicious code in unwilling_lobster_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed86f8c76880d5b261a0b299d6b863e4361690e53d5cbabb0351fabf80b2819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-moci27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79edd8b2669c7e34e902fc9172212337904c44e78d04bb661343ec8df1434ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2280b078daf1579c9fe5e94170c5aa513abbc87512328fcd8d4904d88cc78b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88715 Malicious code in nana-ragi15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608023bd1b6965e008fea8cd7dfa2ac1b4594a18148a7e8586e9c09b7313febf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-peyek13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7d428eab8c7c93c9848475d2f154cf15b75839f2994126f77c12bbb48817f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83266 Malicious code in arif-gembus18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30baaea6406e8010d5c500b0d8db3a951cc443946c3eda82990d8f49f4fc3f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84641 Malicious code in dian-sambel4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f6ed2aed0c009b83fa1d38385ae829847c535296a474c15048c5fda9c44f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90713 Malicious code in sour_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd157128457129e46bec12f0e06d01c1967ae4565906f5caa5893fd342a48403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-rawon64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6180cfdc45d3f876cded051eacc70bf10d606114103fcf9dfd50fb3a096f980d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lumpur89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0f6926160a21f899d2186e9116256577a9ce05eae164e0e0d153f917c265b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83246 Malicious code in appropriate_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad137cd7b847f4a2544ce0a5549c6908608a08fcb7e79a4e10f87146dead9567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89084 Malicious code in ogi-lengko64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9d9c1b4527be72d7576c1f31d6464ab8527bab942ca1a4b26b4af13c622f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-semur75-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6047ac058a4c4565c056f60a1cd6b5e5f9d1c5cf3220d728f5f1d8fa42a302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92765 Malicious code in zain-brengkes44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ba3893f02cb85edd0adc10521d35bbedb850935159b3e96121a614d5c1ff32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...