MAL-2025-108604 Malicious code in shared_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af490f43d5638d12af505a28ffc141db65da9375c144324c57c680094fbb2e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110346 Malicious code in varied_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dc6c0876a9104fa692b1991367e45cf9b46119ef91bc56c39a1f614f2ac645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99476 Malicious code in annual_chipmunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dcdc4a12a3140aaaba5e3b5f1d5ccd1cb8e485f8a513a71eb71a1d9258c07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-brengkes62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4c9d1bf8c8edc0547c4d6bde2fd81dfcad17ce266b9ea16fac29afec0b89e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5141f34deb84843c8ecdfd32dd38dfae53297a69316a331104e868ae9f671cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rendang65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fed95049d9d84fa7798e5141568bf652cc0cbb01693f21025e95ad4155b5187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-gudeg30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4f24173cb21a511c682ee519da36487d9b052fa6150a383a9aa12deb347027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-mieaceh43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c575ec17f3d835b6af08cd9b14b7e35644670667f2e68bae113a98c6ec5437d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lutis97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189b5c061485b6f234a73daa906c6aa4f84f03850c7f3ab0f433c99cb04ecba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-donat80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8065f99678aedf72be5dbe2239f8181a36cd9e05d0a3d4c3d702100bdf06119d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-donat14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064dfe43657764ffccbb7e1f82b5f5ff5ae4d79222bf20aad6d3e24204ef4d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-moci11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642d36354db874cf7f7322034231eab59c63c735c89aee6c364ea492dec124b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lapis7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7513242b0c58e4de206f988fa8a039891e5c75cdeb7f08c258e3cb4c0e958dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-papeda79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daca90f9ec3ced1720403a8759321425e2e5ad412472fe865a7c4a893868233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-nasiuduk63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc1736e449d957cadae78f765c5a2c6f96c860478f9d28d0d2d46c49331c1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-bubursumsum39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cbf5218681d296272c85b4a3d623626d4bf5282d0568245668dd6ba04a9c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb37d05e3d91c0987a88c7572f1fec09171f532f9593cb01f62047b3349cc870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3b870eec96883b7e922219156529694cf8047a91ac8b41785be254421a9a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tempe50-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7ae1d3d16832f22f067f30e43b9c0ceae433d5ff2f5001d1052721f5bda05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-sambel95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c494e6a605ce6172136b0ea5ca427138387ea858f6162e1c94adb1acacb78a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...