MAL-2025-91121 Malicious code in tomi-bika65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf5e9fe38f0750729713169a204825313e3f944a4a27a8e42890d50669f2413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b9782ccde9d7970ec5c36cd7fdc3b7933fd660c6ab2325e0a229b2f5075d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-rawon80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e8299a3a7a1fe43832f08c7a7abef7595e17426beba1a7d13d1204ff02e8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-mie45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2796bc0e20afbe6e6492d2caa8cd0cda4e1df7249b3c36e4a6b4b35132774f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-dradag6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12633962b792b2f65e815a814610df8951088e7ceccc0e1059cba4e2588b947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75968 Malicious code in vera-kue90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc442ef1584923ac1afefe611b8282393a727f5169cdfb65357ae430648b9d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76389 Malicious code in yanti-lontong10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfda54590014db181ed5afc5feeb6c4f3003982c469d7bc40f1204e39e06718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large-moccasin-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21df92d5300ca508dcfc4da4485aefbe0e38f9448927e14d6afc75aa0d8c7877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68816 Malicious code in impressive-salmon-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a27c052308b9f2a1c420d8633ce9ba85ae2132b1ab5cae14b99206c521249cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66684 Malicious code in aesthetic-crimson-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c12bb56bace184d324c5207fe72726d18970c5e8af1ad23b73ddf99a75dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-oblok82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd11d5454425863e7b927d27448d11b17a385b1f57e52819305b306dbecf2e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60058 Malicious code in bumpy_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc02951b6e280203c850d446530d43aac14af593dcdde5a8f4a697b7fc6f798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59964 Malicious code in anxious_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd4a08e1c600e68383514e7db337630b01cdc6cf6ebf6ca0bebb730fd97625f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60304 Malicious code in diverse_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e4f124173fbe89db09ccc5389c8d807c9275c98b8074836aa1af34e6e5d8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb46fcdeb0b4503de826ba59c70630a5b7bb01a48f36f6673ccee7d9773f449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-saguer36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5b26905752cc2966be32b50544deaa36a3f92125578562f9bf1d51dc4a65ee The package erick-saguer36-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...