MAL-2025-61039 Malicious code in poised_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df715347085777b419364059b28f8a2cddd2408623ba55b21dd56bbe7d3727c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61569 Malicious code in various_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadcf1411f10894f09a54c70a8492d3bdccfa6ccb25835939f57d718b90c10bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60007 Malicious code in bare_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dfaacca3d4ee8daaa09449399425cc81336eba940b458b03b4e817ae323024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59936 Malicious code in aesthetic_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51069e317582cf5a2cc8393a3926e9d6a0b7b1b21380ad74b9f5e603e6dc1bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61687 Malicious code in yappy_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755b64ef954fe3db39351ea524ef67359b29fedfa92a1ac834a2b1ce54f1443a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60843 Malicious code in mere_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99061970e6fd65f6d0bd28952eff237e21e51f4251520071b3113143e6e3a7c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-otak-otak100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae647ffa7b698620adbce9113aeba2ebb0fbae4493f74a23f480c54a93aefd01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a89785784312e8df79828ac43867f2f29ce05072276a09329f06d0340d07c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-keraktelor75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443334b7b77359a8a0e797624165ea87e1a7ffff0312c41290aaea1b8b411f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lengko50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fde0e02c90b555e63b2c4a4668ff605aca02f330b3ce97c934a7356aa88c921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-gudeg44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73b8228046209b36c4b710f11b2d1b4e1e57d7c929c0cdd1a9d7c7adef601de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-buburayam82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e8bb26574639b32625987560fae7c835470b37639a3373e54b4199cc16b696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-saguer95-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9799df21246e4b24a7138e50d5302c18fc2e36b6d4698da22e3dc29ff4ecb2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-kacang96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93004a74c20c25cb5e7da868ca672f990a0c86eb45121bfd0c1500288b178d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vertical_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f19f94c9f9cb23b25eaf9a1d6699f064aca8ee6b52a5107395b77fea4da2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b732c3c1ac7908daf16f6d3a9cf72fb64c7eb1fb25550f086d79ed7e88f5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18828fee5e85e1d541056fdda95ea523b5de698c5eaaba269d161204defcd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59350 Malicious code in vina-rangi33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc881919fe2e10dca243a8b4e8be673a8a732e3f2d29422dca9ff45a2847da75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-donat96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d714c0f7342c5f12a953d33e451e283a92fb3d6347f5631811a97cf6de84493d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in implicit_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ffd2a1f1808226cfc0735509b693b66f73b845463bdde875fb83d969ea69a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...