MAL-2025-102076 Malicious code in empty_porpoise_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6790fb554be85d78dcde64fc65359b6b15aa40e2c59e2ee543da2f3d15de647c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99277 Malicious code in agricultural_viper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ecc95a00c69fa9f86d0ea12724f55a381759e132b14ec1ca49afa990065a550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106882 Malicious code in pale_chickadee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc26e364b8bcc851b5876431e28d106e2cf9144b0de0234a47a72056e087f1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101796 Malicious code in dudley-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b390790ccb0a44d4c8e0b5cdf647931253b5c55edfe8d76cd1be135d7b2b4168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d203e12124f34a1cfb4a47318af0e678cdc0f93f2bb6766dc8c4f61737ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-ruwet32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d856ce4b16d04e4306a5c52232141b9ca30a0cef632f368872109468c1f8448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-getas8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e4b0949c836dc8caa56750642baaeb26e9d82b3cf56c1c4a51d20f8e1a9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102182 Malicious code in erick-rujaksoto76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcdd59b61f8e50811068f8bb8b0c6f8a8e7186f9866aeeab63123cc4da218da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e164894e903d99d9c50830cf30653d29ec0f82bf377042bebf9cd0227dc607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kue100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2830938b180bb0e2dd73724dbcf64dac3b3e10b7dbdbd828dcfbf743c901d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-oblok50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82061a5f5617cf2c6b2232dc6dff409afe9340b236243e9e91daf208a42abf6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-moci13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2264b05ceed16714194ec8b3000d29980bb9a369fd5358c3d5e2c0b32cbdb209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tahu31-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa5d4ea8809e5243b399500c19c67e1d8c850148123d81fcde4448cf5e48db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-soto82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a2f5ac1f7470be3ac87e10566b75415cd69604d5ea81720040c0c8a6debfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lengko81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a55a9a51fe176ac242aab9d97c80f7569931cdd0ff0ca95f2a862b48521fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69159613a5d3fc7164d72498c07f931fb80e759d9b5d0bd02226ff047059af94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc203d2240301105054d21f9fed7ba7f10695ce6ffa77b239c065ccf3295d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-kemplang26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2b678e0410ed1a3539ad2e683ada4e575328968dbd5540aac99a0206e0be0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111219 Malicious code in yanti-serimuka39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71b45792f0c0f0d9effd8d7864334bd0b436ae52f3cebf8bfe6069c01a50cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107418 Malicious code in public_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9706a0d9001a5b60960c546d4f4741faae572b70a94a476b69587de21995db09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...