MAL-2025-85705 Malicious code in frozen_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3ae6158f0cbe1d37e3edc6028a3b22fcd5b5ca4c8d24b44b137c1d4ef294be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86466 Malicious code in hissing_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b7cab8d0b844646d6f10e0a2aa7c96ac3cd3d50a24a4e4c33ccbccdcb02005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89098 Malicious code in ogi-mieaceh14-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8364a6099b2d876c1686af6abff2f0e463430496c83c29d476f14bf043af699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85411 Malicious code in fajar-gembus17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a2c8c742b9c84ad98339b478b735eb6d87eacfaffde5c94f90f2e514283beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91175 Malicious code in tomi-oncom100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6a7713b5d3a2b0280f80c5ae70c669665dbe099fa2431e26996a08162c73fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84479 Malicious code in dewi-jamblang13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95aed281048c59b694c5a0f5b2dcf783dd693abb116b0540fd8f1b917eb1c263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-empal73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e6be0944e0b60fe85a19168fcc6a63d22773fd6bcc17a7dbb2f87b80648e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c995d33ec41b23fe628092f48da9bb83587e8bc3bf504ca5b399b15279f4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538c6261d03c63df405646eb9d2f908616fc015593e84389e09e517791df55da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in many_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c9c9cc1ccf99e031b30908c0661223ed412ee5eeaab615a590fceeaa792be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f7a4eb8c4483686e76153a920d1fd8f34ec73947dcdbeb756c0961dbdec340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-sambel13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946ae80e5229d14256410e95e889db850a29b6d8db105f309742d559a12ba327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rangi86-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db1fee1bf69438b62b45f1ef4c87df680a0b6e0c34df8f0a755eb2609a46c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-oblok39-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a409d8e13efd55e6f6782465d36dca32ffef129df7b2044e85422efd234a415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in high_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa40a86f165ad685e25ed3398d1c8450428248290a1e3c5356325c9a0ee91a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-jamblang23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb05517524c605ed402a87591e616c5035b6c73c498cd9494b3749ddf483685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-sate24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8af1aac107a94bce6d119e475b1f57382b9687eeae6709f3ab849b69282f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-sambalado72-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df886cfc5430655c4987d741dfd2d25160c81be68cda51427d662534cfa38acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-gado-gado35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0283196457a9b7e61c150b6f336fbd13ddaada0e84681ce77430b07ceb827852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tahutek62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e5afb262b3470f953a658718e760e204442cbf7ee56e8db0849f0e6f365c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...