MAL-2025-87995 Malicious code in lost_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2ecaba97117a4ad3485ea18a2b748684d6b04e9b431ffc4df26223d45df635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89923 Malicious code in reliable_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3a1dfd524b609e3664a9cab6e54b4a354c2bb41422207ddb704f31252d682d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-ongol-ongol11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d53c22b35b7f332f4e3c9d840565a8c9158626a0b89381c9f7dac541ffe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kue79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2d0456ae9783763f00a5e404afc91113cdb2ff6cc8eb6735818f09feb7e02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa62a36401b7ad05d037465e5427b704053fafc36160599cbdeb46c0fbd0927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-kue18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86466e3b00799180b189abac4b143a067183b543dc5f841191b151ccaa3db110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58076d46771f0ca330364aa5b9662b3df254a5e9a67c03f47246be0e7c556d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-getas58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92003c8742809fb5d197b10c9d4c9561ff8219a457cb03b8974a0bb72442fe38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ad777c60b993fea75db5ac5476914ac2192e9c0351e3c8d614ee054194c372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-telur34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b553ef1bbe19ce5ee93e1dffd0c97c89865a70fa78f356661fa9e0fc87e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-klipo83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc40a03fc2e7c2b2851c47a94aea3d278306981221044f60f8a6de646f26bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-pisang47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f90f318328a7ffcd4e3eb3a4fcf44666c78b5c7cc23361f32e12aa1ac4cd45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kue42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f811206364de2c6dba5ee51a278f54ff906bc5f2020eaad9ba1f65085556a40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-serimuka7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0ac81973090808646b5d0cc8e715c5c4ce27e4f6e2d7b48a23778e3fdbccf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85949 Malicious code in gita-keripik6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bac4360940e7cf4b5d17a5386d5ded9fc4044657fbb2bdca40580d10d3e72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85712 Malicious code in functional_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a372825b427d24311dba6c4259b081580446b2f8495ce4d30c024929f552df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90586 Malicious code in sinta-semur47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bab410a5fb01aaf183e736fa587104ba06849386fd987632dd368fe621c543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85445 Malicious code in fajar-oncom4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567e5296baecfca567e2a4e26d78a0b5564866025aff7a1f71353b180c5eaa4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86378 Malicious code in hendra-brongkos29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa042385481064fe12824e47f2c3376c7fe99f205b5bf358b2428cc0a1652b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-sasag36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820e344a5e5421f936c1b8c7b654f867e0ca829f47780b04c57da38e73323ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...