MAL-2025-102971 Malicious code in fun_pinniped_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badf0e7c2d8a4e4052983af3ab12ca058370c4b48fc47eafbb7e3d90b314f215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107247 Malicious code in previous_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03c899b7c33f4f0b15c8b684213708a555b951e16cb2eb87828e355d77467aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-gandul97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5480fdfecd976eeeb8f8dff41b2af9f3b72d19e7c8e34e0d87cd7d10e1e4374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104001 Malicious code in important_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f103f181b5afa634aab06d4fa086db2a43551b8de623a97eb724d0a1aa6962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-rawon13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff05cb48709e1b2ab7b0c62c8ad145d65fe405f7e123165d1e54106b4da4e81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100615 Malicious code in cloudy_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ee53f006fb8c1f6ca4ea673c8b401e0def5b8f7502df0929c9e469e1d44837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae040b93fe3026b460dabacc525874e3e517d497368276e9afe95b4af75a73e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99556 Malicious code in arif-jengkol87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85da17efaaa8d54735565cfa220640ec4339feb4c61e507ecdedb94093412f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488c87f7e559daa24ac229e1fec58a5046a468defc22d0458cfe6554b41a15bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97816 Malicious code in fitri-ronde25-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d7c136d011c604a585e70da7aa14a1b9db84277cf5eb648f9d847dd8e2ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98321 Malicious code in rudi-mie96-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79aa50c71af49425079b5174136cba6c068ae55d6bd821a10319b507f851a3ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe8b60faea00d0a3748de223dcc2bb81d6635ff39d280ca970efa07901ce043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f201bbf55414d584e3a943fac6db8129817324ef02f89e91bce0850ce2c1b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2679668997abcdea18d948c66d6b0268a8d956484507acff6f07b52d205eabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c52752d8c88f16a21aac4956ca7039fe776b9fdac9bff32dda4edd35b9701a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95120 Malicious code in irrelevant_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a82cf5f35feb259462cf4fc4857c83fb5c17a5484ea920d85910fa148c31cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95932 Malicious code in poor_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f789cf6c5c8075e62bdbfe2741d160889a2f563d9f2061f8c3bf15c36318ae70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-getas3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df1274d9c92054969e71f8edb850aae55ba992cbe1099529cafa92aebabc622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85186 Malicious code in erwin-kue76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376d3c81a791975efcd2c8dac7052bbfd6c9636cec0dc84626fda08fb5394d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82876 Malicious code in ade-gulai95-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b6935b83eae23db846db3d7bdce0cb74a12f79454e755c462dff95491a8254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...