MAL-2025-108847 Malicious code in slow_sparrow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43f121542b3040bd3a30c40832a4e177db34a0fa6741b48d921e2054601c9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae040b93fe3026b460dabacc525874e3e517d497368276e9afe95b4af75a73e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-rawon13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff05cb48709e1b2ab7b0c62c8ad145d65fe405f7e123165d1e54106b4da4e81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100615 Malicious code in cloudy_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ee53f006fb8c1f6ca4ea673c8b401e0def5b8f7502df0929c9e469e1d44837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-gandul97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5480fdfecd976eeeb8f8dff41b2af9f3b72d19e7c8e34e0d87cd7d10e1e4374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99556 Malicious code in arif-jengkol87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85da17efaaa8d54735565cfa220640ec4339feb4c61e507ecdedb94093412f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104001 Malicious code in important_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f103f181b5afa634aab06d4fa086db2a43551b8de623a97eb724d0a1aa6962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488c87f7e559daa24ac229e1fec58a5046a468defc22d0458cfe6554b41a15bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97816 Malicious code in fitri-ronde25-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d7c136d011c604a585e70da7aa14a1b9db84277cf5eb648f9d847dd8e2ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98321 Malicious code in rudi-mie96-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79aa50c71af49425079b5174136cba6c068ae55d6bd821a10319b507f851a3ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c52752d8c88f16a21aac4956ca7039fe776b9fdac9bff32dda4edd35b9701a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95120 Malicious code in irrelevant_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a82cf5f35feb259462cf4fc4857c83fb5c17a5484ea920d85910fa148c31cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f201bbf55414d584e3a943fac6db8129817324ef02f89e91bce0850ce2c1b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2679668997abcdea18d948c66d6b0268a8d956484507acff6f07b52d205eabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe8b60faea00d0a3748de223dcc2bb81d6635ff39d280ca970efa07901ce043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95932 Malicious code in poor_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f789cf6c5c8075e62bdbfe2741d160889a2f563d9f2061f8c3bf15c36318ae70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88162 Malicious code in mahesa-ragi89-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb652020d55baee3fa4001a4241d04904284e1dd1a55632a8ae5a05cf171e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89220 Malicious code in okta-tahu26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f62506597f357f0009e4d3ac43b8de58cce8978f989186da176571a25cc5573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-getas3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df1274d9c92054969e71f8edb850aae55ba992cbe1099529cafa92aebabc622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-mendoan16-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccdde963f135d43ee264a7d5a164049aa4036b36c39fbff073ffe8a93e4633f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...