MAL-2025-94731 Malicious code in governing_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ffd874d4bd6946e28f61fe493f3106ff45c7d3a9778e3432e6df91b0885228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97232 Malicious code in various_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38f09125ba1c64fdd3f1562b6b1dc34bc9cb776f402f61f1dfe1c62f01f8ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94172 Malicious code in economic_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d36ec3d2fb70150e74d50f60f497d363bfadd7d2bf40dcdf381c5fde10f1af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-tahu60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1d428bf6d2d120b9094fef9824ba48b5f88942cc648dbf9a522f3ce48af0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-jamblang18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85cd4d88246b86c7901debf8683cd3edc59b5ec1fa6ae1ddf81a510d1bade3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kemplang2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a24f1c112a7c4d52fd49f5389a3499b9bfae80ec57d6c0901c58a6e3ca4f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voinzaril (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87d5389506157d77922d3254f0111da25911ad85a83982960d13f9574706e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3014bd77fc006803b0310ca4005da37415bdf95a69a9b9c524925c618705580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3d40583d36814db00315d4e6943e48e6f666d0973167450a50bc639c0dab0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inclined_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a3bde3f0ad9827a37951a73f9cc94467c0c04932feb5cf406bd09051cd62fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-telurtahu37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9537dde7eef9a3f0c86dcfaf19ec0b0726ce514092aac9732f27ef511bcabccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-soto11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784d6d816bdf7c028ae4c40420b60aad856966143570b3f13c8b6ed0b98560b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-menjes4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580f416d97a7dbb062fdd6c3a3deae55eda3f44e76f67126a4212e8f0fd37433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kacang26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dee1fe5a97c1936975c58c61cb6a88f0d75c0ba952e6fddf84ce6db7b9404a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-mendoan98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443dad476cad2b053a2a722091ce97fac6c6404d1996c9bf1ab18ffd84b5a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-ketan72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa96bb9c9e300a08d787a646fa323403cb911c5e4fcfc4efc1c43551a69e3b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92f4c5a6024f7ee73b590a5c61b119cab1202a941b517538cb017d1659ce6cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-gembus49-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a290b52a939a3ee0a45fdf535bb5c245a12364047c1268a8ed8086dc7d61f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competent_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121918532601c42006600386d00c19e6d2aa51e2c2295add5ceb087dd91d1654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-donat64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59ca1f4797bbef9b380a370f9783d5d78d6632ed3da5022b4891792c3b742ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...