MAL-2025-109158 Malicious code in stormy_warbler_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff0aab7fad8fd9bf01ff294d6181b0a6f0bed630c520470bbeace101a1c1147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109315 Malicious code in superior_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee2431e9995cd93b8c55616d1f2267275658fcdb60942f6899d80b23f5c2af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105786 Malicious code in melted_parrot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a6e88b614ef6992eafd7026cf3c4e86d420e9bb7146e7c034d3660bc756e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-botok9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf1552ae5c97e1bdc75210cd0a61725c0c731788f0f2a2c233184a25ee01aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-moci68-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e4d413167f2c8080e6b7bb1422e80c1741a136eb160bbafe4ee1b498e8f55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-nasi65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9112c2f1707db03ea3084ebe2385bdb5a6dc2f9b1d9b2bd5e434550730934ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-tumis88-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17217c66f318a93bd2a38ee17fe8b36a5f0885fd0a04a80264442281e4d377d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45167a5fe41bb68905ff77f17843ef4c8ccf418aae1f7b12d2935901154488e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1b8bba26d21464f61b270a1f8e06965463e4e3e2c9efc582529665e86582bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b8fe795bffc12c310140cb2a3660d930e04e7dbba0186dfe31e92a7547077e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marine_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb0bd435276b31f80650d1fff93c744a6b54d6dab5d3dcdfd7e8915e3833fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tahutek73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7256fd65580c2e8a5349511ffb1db26bf99940e9a1fa4744f1d5ff40863e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-teh36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6068c43302d166e260bfbb52b2353aff2f297d381b14665df5fb540704ec6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tapai6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84035154899087d5c5702e00e8f18671bf21f3d704a30f99981820c33166f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-miebogor37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56632bc570090fe683118d4a05d1cb28fae35319c73478af28f9db807ed46c04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-keripik6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5586f22dffeb96dd0bb064e20aca9fc113b5c4fbf69d3382e8863f8a68d55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-bika30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136cbb627d847d2fb1f74aacc177a39c1c935762ac4996ac5879858ea335726a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104536 Malicious code in jealous_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0b0e2b1523923ae84ff80d63ef32d6cb34a8535e9619755d28f71aa6cdb94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110509 Malicious code in vida-taiwan84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bae89949a858fa7a60d360f02a71b164063ca8c08b64669a62407db9475a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109381 Malicious code in surya-kue7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b387ea783d0fdffa7306a9252d8bc3e982cc89768502402020ecae2df55bcf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...