MAL-2025-120141 Malicious code in forward_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f940968e3cb5d491ef3cd5779db09c7394528085c0d8293ce540eb9a20cfbf04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122688 Malicious code in putri-menjes69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae0cf1b64af4befb3debcc9baf9b0cfac65dc316adef39b6792bde6ae29fdd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123174 Malicious code in separate_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b226497d06396568699c3489f3f9c2d22303a2242711456d46c44827ad5f1f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120648 Malicious code in husky_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4456da2e5fb68387a2b7a4157f52e7071b3915c86b96d7eabd73d701851e44dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119266 Malicious code in comfortable_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832f79c35e71863fb7aba9f0cb0f4c63caa8b3f3dba508269a97e9f9dd9078d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122760 Malicious code in qori-kue6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78681ce869bce8e66f8a07061006d118522106e1cce03cf2eeab6fea7410ffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123063 Malicious code in rudi-mangga52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c55264ce2fef8499b9cf1773befe8dfa62bb0305fd65077717155eac2e7ab04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-bakso11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b75627f6d9502f5c8e29d0129931eee12ac8cf3320f3749fbcc5192f544a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-sambel74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893a2f9ee6ce7a2e8cecd6313d1e1a15466b69473a55553f2397d1d057cb0b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117350 Malicious code in tania-mie20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3ac4c23f64ec119c972705d5646f0732cad4299a2d60080164964d719556bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d14ee4d7736ee74cb98597fd3a5f08f43c1714a1684ca5043d41100b5dd213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118141 Malicious code in xaver-kue61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7ebaf5397d113108fb5b4ef88ff5591b36d44ca2ba295b06d9aefb93ad027a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117175 Malicious code in sore_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7472ddf67df2bedb60205200dcadfe2d9a883c31c92e27690e5146c44274dfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114492 Malicious code in hadianto-rojak26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390a11d97922fe8e5a06525b76e41f8d4d2683999a90c8b201b8d5e3e381ea55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118246 Malicious code in yanti-mendut86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230841465536c323d654f6248bf5fe9df1bad84c88090237ee082913f685b613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112283 Malicious code in selective_pike_fuchsia-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddaa89e00a2509fa1bfc0ab0e696c826875b3f644cc35473499cf0d9cc12914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99875 Malicious code in beautiful_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf72fb7258f3ca98202f0a6a04b0647a4fe6457a8a036cde296324c0b5be616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107248 Malicious code in previous_quokka-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293bc888c42ce59c4c84449f6e5d9113cb62d1b8ad60d7d61f9bc47d85811235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...