MAL-2025-134360 Malicious code in integral_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91eab438ef4c77e1cbd041c0ad7b5adf3dd14275dc9ff777d0595058a534622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134128 Malicious code in hendra-kentang1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711e1a19300a1f2c7e431f99df059748c0723f3ec7cf5ad4bbff0a59e202ce0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133939 Malicious code in hadi-jus54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6e10f8f1237be16fe0d00556e34d049653816cfbdb032cdda530b295560123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135488 Malicious code in marked_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c683dcaeb253e3199ba1d2e030aefb51f161aab335186936dfd012de9d9ee932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135254 Malicious code in lisa-sate15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6d25659c1ddaadc038e292ee2878fd70d31cf78a28b2a0b77236b8ef66d9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-nasisayur70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d843e48b6d4b94ffce7bf58ff2c80b1274024a456bc6149f188480931eb4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127704 Malicious code in joko-keripik88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace50fe39e782666808954d09eec65a6d467ca01006302eea78bc84e86c6e3c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126111 Malicious code in eko-rangi90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b31bd9c2451b7d6805bd3f1772d8aa26f816d913bbf3f5b0d465074d151025f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51eb5b190e91e6f53a1579915004a006f96f740ff4340c9d3a07b3eee9f177b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-tumis43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2499e5df5a6d444cbe2dc09e85f8bbff0e2834024303fcf4ab4f9e6c21a4649f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-mangga30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92a5de7e56f232747d96a386cf1b8c70b2dc4fc80efc5786352700bad401c486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2477c2aad954e996a3e2d15943b44cef8df82db75bbc3ac78fc713d834d5b474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0a7b9e6ba201c7bacffc22d028d9ffb1a53eeecb16fd421936d445cb81d692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287f5f64e3d272e229804205853f8b66717d66d77be89cab4f832acc5c670475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-semur62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67ed1492b4737142562001696e7617e37b3163fb515f6172b5394cdd6384381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gulai32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc845967a01f82145ba5966c9c8ecf87062833483f59b0e9a2d04300d6888736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128662 Malicious code in misleading_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339b9a7bcd5597707037ca90f55903f6a3504dfc144acfbc24601247d7a9ef3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127625 Malicious code in jaja-pecel37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c1ff5ecf14bd4f92769f08138ffa9584a7daedbd8141c557f7b1e51f58d02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127502 Malicious code in irma-tahu14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a59ec5d22a07214c1d81920ab6ae9a6acc2cb9d5670a49e0ec0edd611000511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128422 Malicious code in magnificent_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebaae3196285f0d4ec1c1ff07ee440d04fee7a4cc2061499516bdc969fb77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...