MAL-2025-118707 Malicious code in andi-lutis94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4417770f92c13268d601c1ca25a13fb085aea76954c7bb26ef2f851fa5b4729c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123572 Malicious code in tiara-empal97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e9ddff781eeabc9a1ff07bb423995c7a5fc6242b265265432ebc78cb52a1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123236 Malicious code in sinta-kue52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089d6ef4a4b1e08647952fa3d992a378a662a4846634b60186e47853c429bdfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-telurtahu57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b140160d8369807280df8452796cc3fddfb84780baf3601f0e3feb8b8724aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114638 Malicious code in historical_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38293329472cdfc094f85a42d8ed349a2790b7903ab5d7c90570979bf867e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115424 Malicious code in light_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e24995c2c6b3cee12f3bdafd6c270b8655f9ea8f666510370f19b18d7b40c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-bubursumsum77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d670def513603c3837ac82ce10ee8f7f6202877011c6c8fb63ee96401e259eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114192 Malicious code in gilang-kripik12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f260ccbd36fb71f43298034e6d6d0b60328f17addf4851a31e5c077195b267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116573 Malicious code in putri-nasi74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 232e0369dae010c6bba77ed9e4aa0b923d1100c16d97b38cf0fa5d80cd8ccf95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116528 Malicious code in putri-bakwan1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee46eeeb7ef111585b04e5a4caae49cd234098f3de3a499da273ae31cddc34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign_coral_gold-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffac292a115d9068edd190e8de041e5beca9c7ffab77c2e42752345a85b8b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110011 Malicious code in unable_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de65ef5a92b0fb3c8f2e27b24303acddd44e8e0c2d032783a0f24ef3254b91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106799 Malicious code in original_shark-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fda335f2e20e6a5c4c89e497e81d52bf55f451eb93aa8f9d3234cb63a2d7188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99256 Malicious code in aggressive_snipe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281fa9df12e7754978a41d9ad102767489663c182d14c3c4fe597968c093f8b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104205 Malicious code in injured_angelfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d82bb45e4e42bbce462a5acdba3e308403f7429f0e997e6c6adb37a2c37ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100785 Malicious code in complicated_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5867911fdf1568ad900a85614f01b877cdde615385c26dfd4493932ee475577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lodeh9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabcccba74d69e75cd3e3c6d49c95653652ea6e470fefaebdf32fb1cdea53ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99191 Malicious code in administrative_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782e37c255ce81a97bc5fb2048c69b5be349b5b6b99d88ffd8272746612f6eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-tempe89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee39cf6727269d481f7bb496ead093e20ff90d51ae803840ac96051f5574cd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-rangi27-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52042deb44c0ca4a457b194391b335a5523235f0826865c310f67aac2c94a0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...