MAL-2025-100098 Malicious code in brief_crayfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1739bc00acef98460288cbf650a63259ea672c97cd3ca74f216c9905b2cd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103816 Malicious code in howell-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36e0f3c88c2591be6af8c1066ea67b39a57e7180adc37766cad8de81d1e2328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110952 Malicious code in wily_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862e91758a34dd9f1a4c86434869c5b2e3e4461b5743a598111c5ef711b5396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102068 Malicious code in empirical_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319a2b1da483146630fb3367390faa50fa98a57b0f5b8d4b8ebc7de345d29a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101290 Malicious code in del-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde5393c9b9db5797f6cc2ebd77a7ed53d307ae1c3336a7d0e6b1c7bbf194acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110566 Malicious code in violent_thrush_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6355897f93b32f836f8c2e09509d66b5d5a16cc47fc32fa6e61ec0b4604f9429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-martabak13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d8c3bdd617f28e7225233c63b268634872da11eab1a8eb0a3a477d6ea1d578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-wajit53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1589a979bc591625034193be833d3d16533735433060e6c8fc8afe818369ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-rangginang25-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed1f3cb6288b859ff982d8aac804a61ca3deae929d711aa3ae6a4e4eab8e6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kripik49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc934bf1f77c97bf901d33694e45c25054fbfca8cbaba437e5614419dd064a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69159613a5d3fc7164d72498c07f931fb80e759d9b5d0bd02226ff047059af94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ketan77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47597c9a726316ebb63035f52b9c1afb24b78120698efd9ffca7f82c08c158b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-bubursumsum39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cbf5218681d296272c85b4a3d623626d4bf5282d0568245668dd6ba04a9c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strong_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103cf86e822e170c2696b05c76fe9f1c919c8a2260de8a2d9a35b40aab88ccc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8f9297f83230de43df73c6941933850f0b3a8de411c4d5c25937e4ed2e7572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-mendoan1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdd0539829e45998ff157fd86ea063be6892214a6912a83615da9c3e9d6ea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-soto34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d378cdbf58a6a96e556ea22eca636e9aba3780c2df528cfbcd9d8fd2c487ecad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tumis69-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23aeb7d204a9d882e612f4a923f60ea4f4a0921541513cf4b1236fdddb197653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a7dc96799f542cab93f511604f466980466e168014dcc3ff57cb6b8f45e194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-gandul79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22b1a2f0b20d882b427cdab1d114e2f6ffe8d41733f0bde6dabab3a69af2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...