MAL-2025-157127 Malicious code in juris-zs-drs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2ee0f93e79cf6929ab8f37c5f4374e56aec004920e7e1e2f001b034a65835f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-module-winston-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb5ec25abac37225c8be7b23ea2da3a0519e6735cddc384929b39303ffc3671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-hexo-xml-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c816af0f803870e47672c841645b4a3a9fe5a554904a699390f8a94b5555ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tongseng35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7956834421eed09b4796f504f235bd6a4bfb589e717f9f8054937ed1b0627c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121540 Malicious code in lisa-lupis14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac96ce43d35446c7f9f825dcf85a6b5166eda262da8ebc1c38fa01e8125d045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029ccd6644af84f1417eae2a25754699f86f2054d017ad0bd11ab2d6e5dc51e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124109 Malicious code in vina-miebogor43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742ded8df499b4fd403a9b42d0ebc59f0030a05883c0e4d71f3faa2e90014f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tumis80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079c67279c659668a4471fd67ef52c7bdff4fbf5b97baac50d52fdfe75b69daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_gibbon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133917feb934e8a50f16553805db692d6b84a44f25761e38a70f68d522ed0e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108695 Malicious code in similar_grasshopper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ef629eecbb4f6fcd0b590d1896e9ce6f68392df7089944f9c130117861c8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99137 Malicious code in ade-gado-gado1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad46414f549720b8a24012d5460f4874580f80ea63e380300c1570e80d52d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6b1559da0c4b7c8d9d9c23b153645a721fe1ccea0e6c8398955ac2cbe8f1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sambalado10-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872edede184d766923af0e24a372a3b3da8465b4dbf07043fa74d27b0f721fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88023 Malicious code in lutfi-keripik45-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf5623d7c292375647a5c22df5419099db7ab389f842e746349c7017fe6dcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dcf2ec7d12986f40c33c92a42ae6711c59314da6c9e7d71e28b33d6a72f487f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-keripik88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0c879f167e5697cad7cdb1496e7f61103d17573a608de86f45f7ef0855bb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling-tomato-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28ad0c551330fa2445de8ff8aa8d40a6369fd92527a45dcc331f9987013f88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-turquoise-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfead871202e84699d3e7d944c2b1b29944622c032888b475845dc092391d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-martabak52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd1c7cff9cde85d97f32edfcaa664a2dc3675a1b3f1db09e5c96b3d8e2a934b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-sambel94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9599521673d2e7d3c1fe1859322a935a9376a7694c5a4f112ee4bc3746e12016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...