MAL-2025-115195 Malicious code in kresna-gorengan99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f240cbb664230f261a16c12e4772f06b9cec179dc7d84a7d25f6d3db8a7147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112792 Malicious code in bambang-rendang58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8592621f06ceabfc60b29fee77a9bf8ebb592ac14f33654ad01be69f122a3de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-rendang37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23439cac14bef586faea48897d2f59f27d4171e877ae3130ba8f7a11dd9ff9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kue32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3ec8b60031cce8ce336cc5e95d9948e6d5690be14713574f63816934187c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jrxtzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ff7ec04b5b5bfd2f8d5c6ebd45786d509cca97ae3eb00f5eb94274867b9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marvellous_quelea-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c824126baf2d2952afbe28fa6da7b508f2649f1a0e508303e4cb1542702c501a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99085 Malicious code in accessible_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5800925ccac1682c2542dd29fd16038854c9d40a9443e8c7381db36ff212d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108577 Malicious code in sexual_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2c8842bd56d5e692004ae4238b2dd91f0c5ad532cc6fcf9c0baf450cc3e7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108999 Malicious code in spectacular_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c5febc1eb59b8ae539fe0060a7b4ef5ee7b7f36fb878a46374dfdf984caa8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111425 Malicious code in zain-mendut57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d82825ffa318239d9ef93a73fc1fdd5d3fd7203b62e7a1461091be8439a96b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kue17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117ec205226eb9c161fe7ff627ee5ec979277ad5b4c227588a974013111541ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-lodeh72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd20d5940a456d8bac9531728e7b001788c0c0b174680dd0cdf1097ec2453a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af29d845c6597d7ffc97c7d72064ace7c76e7ecd246ae088c7c94fd9d9bd37fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106526 Malicious code in ocha-kue56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd73044ece0faf4c67fdc6ef8c10b72c8dea3a99f2b6f4609d59d0c9106fe673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98009 Malicious code in kind_yellow_snipe-70-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b5872ad28d691e55317b77a121fe085c1450d48ab23f8880b4c548451e78c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e88280ac39c31d1bc4599ff14d9c7c93b28fd5f5fe40b3458eedf14023d6150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e464d27fa3079519534fc93dcecada210f9e1b90726f3562dd64900cc89ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94608 Malicious code in frequent_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa09fe3d689140d7b8209b249abcefeba947fe11ef16a3b7d107cdbdb437f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93371 Malicious code in better_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2318ce91afd9bdbd1c7c885538b8a8c53c39d00909c886ae32207a214e60ddab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96363 Malicious code in right_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ed9a779f2a0d2cdeda3e335499668f20ea4a1c83bd1a88c6b919dbc18f9ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...