MAL-2025-106023 Malicious code in mulyono-ongol-ongol29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4acbb758367f17b65bb2f5f72ce7b6e272697c60424a5c4ad8a0e81587373c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104988 Malicious code in laila-lapis36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2f2be76ed299a436d4b5175e9e39d68fd342184d6b714bc44d48d782e03728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sroto36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadd7f8d7cc04f142115c7c8d1163b0cc3d71da17ce0b8c806bbe6585c15039b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-keraktelor46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6c8aba542e9a7fcb9a43bc37e7d2a05b2394c7ca2b87321eb026b28fba1a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100418 Malicious code in cici-gandul57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a241682b3ae14f114568ad819c91ed949d0b4b525f6ab6de7e05d4674a1d26f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134a476d7ff35be2c40d140ecf4b0d18e690ac940dd276d472b4a6ddc5bf5448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breezy_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8f281e8eedaaac8d9a6241894629933c8fc6f942bad2fc1e927d37cc8ee1c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc936f393e12653465edd9f4c59d807fa8e845936cd3ba06137f37f2e2314fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f460d781d2b88b4f1bf127bf2e5ef5900f18e5ef001936c7b9f34ed60e53e732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e280871d2bf8c164397982e6da5590e2ad0c435bfa9d687f31b00969ca73ad4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccb82524183a973ba0391dde2e79f25f9fa9d07f26b8d3bdc302442928078f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-bakwan54-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a68519a54b1c5327f151c160da94cd17763b6a5f2fd5a67e8a0be991303c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16900ddfee1c7e2f566aab15560e0021ec0e247613ad769bbc866a8178cadc3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba3635804690d6d441b691e58416ae4a19527db09759c07c8806ceea42e0ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in recent_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62ecb03bc2ad09f66ff3192f33e6b69c84ddee0593fdc2f3ae279bc4cbd87dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudiscammer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6705132fa8170e7a7491fb1be7383ced41c90d42be918af7551b1819c62323c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da453121e649badde837b06e1f33c86d8daf1a3c9ca8e88487f326eae67c8140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2591be4d528445c520d8571c279b169cff7bbe9ea471971f760a2a1f4902a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64b01e74eb3dc81422ebd71573d35950ef5afca35480a8e25df3fabd2004283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98985 Malicious code in unwilling_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4334ce19c1da29cfe3cd461137d5d687da15583427711eb2fb550f7193369a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...