MAL-2025-88684 Malicious code in nana-klipo15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9368ec6c1446161d47ac4bfb5a38bf949166bcb9bbf37788de7f6f107251af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84679 Malicious code in disappointed_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ea7a7d208eeeecaefb182647417caa1954d700be0520fa335c81ecea642a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90801 Malicious code in supporting_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf0161003699eaa0496ebb037c3b7aaf81dbfc31de5e222f9d24041946ddebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89052 Malicious code in ogi-bubur96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21171646a3a4d2baa42adccb56b158f72ab4fcd366349cbf8396388520fdaa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85040 Malicious code in eligible_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093cc0bffd68781357567e4a70f6d70e609bdf8811090cc4c30308c7099f2b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-klentik86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544b80dedb0286bc7633559d137464dd5c8138e7a67f2a69a753382bf4877076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-rojak35-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db25b152c0f8aa70e6fc7850347bfa9f21221ee9c906ef1ca3a5c514a7f7a7e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8639254c755bf29f4a57d78e9f74b2e35f9f27bf632df500acb64f94bac86417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-takokak75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661ea663b3f662609d2e6e8c61416ca3ab232f7895ac562c5f28f370127a1089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-taiwan30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328fdcad8fe34704fb34435f086b642f710b6d9dc6b8ac667d66312feb9ab5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lutis6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03272dbb28e542d5eaeecb3d905f765a9ccb186368f9d98abf8d3a3e1ea96a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-gudeg17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa547bea86e0cde1af26e6afffe525a3e4f775914ddab42d9f6659f16881a302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88322 Malicious code in mathematical_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f76f4949bfc30bb1a9cc9ba33d79dad0ded18a034c5955461d7f2759d46985b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88578 Malicious code in nadia-getuk55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84cc0c33d9a1d16d232efadf8c809e8f36775b429b834a5c5ccf2b8dbc26e81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91985 Malicious code in voluminous_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c2b4f07dae24ca6ac3dea75604974df99db556705d6f084cd91c7fa9a5a9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86555 Malicious code in ida-naget41-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc50ff7165b8e50465b229951c3ce155c112880d3969ec354b90b7d97f7fa84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90098 Malicious code in rifqi-martabak93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffe73010cd484d57aad5313eab4da6010640554e04dd07e578435d6bf248d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-botok10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c15f223ae4ac94ddb2bd73342fd82d98af9bb50ec22725920108a362b5a30146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ea738435137ce555141d9632afa1c3ce7d1ae3618dcba9a6f4677d1abae0ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kentang98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da822c731f831efe63e366b8f0abeee12ae45ca7d19b1fb9591690acdf5f01f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...