MAL-2025-105477 Malicious code in mahesa-lontong89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592ae80090f9dedfaa85e55f792737dd99580b0871e4bf6e08eb41e729473ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109059 Malicious code in stable_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260ddd6d023c71072f487ff9010931cfaf855f83b1099f1932ed489c7b658c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102658 Malicious code in federal_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cda6b5af94c422737ed05f69c6e31130ae6f5ebc50fff09b748d351baccb4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111450 Malicious code in zaki-asinan2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2264562b92c14bd730a5242cb245e16c81515953cbf7c82a4645173fd810938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108096 Malicious code in rifqi-sasag63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff238bbb7a0fb3fc38ff6b7e510d282e963cde9972358a00f9de9207bd1015a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107996 Malicious code in revolutionary_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3526482acfdf941cfe43d6ed6c74048b207e692fbe44f754de4a5d4a8b3202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109724 Malicious code in tomi-brengkes78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bbfadfa8afea3ee0a15b4eb1e444567e6d4e0a203df476336d6b2fb87befc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-nasipecel64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b49f3bdb6838eac06b30bffdcd6a4e6351d4b18e58c516927b4f7b56669312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111419 Malicious code in zain-kue71-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d95f67c0e4dee2768d59fb0c0f5e3c0b5e2b0dd3cf5c918ab95cd3b76024326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1493da1612dda18e18e475a9460b2545460c3e6579662986329f2caaf361b1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a506fd44700f1d602dd8d67204c2cb799f713e6e2a5ac7c7639520a97091fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remote_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fa78dd9497ca981aeb452df41dd667e1bcfae340b22c5bdf3289c8444b8956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89329cf0c3a34eec3d305c87db777cac9878a12ab2faa26e2718181dd6c25208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99017 Malicious code in yucky_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7d0290ee65de9f090a15409c7aa16ecbbfeb9eb368efd43c29e10e2c7df0bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98698 Malicious code in emotional_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d071028501424291218b4bca0c36e0f3c7911e820e0606e44fd9037f718d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c8057b0f5d6a004552ed986123cb83deaea94582bee76f8ea5e75b525ce6c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84745794c94a6967046126d7ae5c010e29a54c4b954c1139eb0bc15eac77688b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce964c20d4f279d0668df6c6906f0bf29f4960a3798f11a62778d4b5ba913c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99011 Malicious code in yanti-serimuka55-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658326de8d0ae27e1255f7866e9c4fba6a72bb950885bde03766cb50bab4399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb1c0caf57146d31b37154128ae9c5a0dd0cd36fbf374463ad195e3f3cec5105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...