MAL-2025-88422 Malicious code in metropolitan_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17e4622ad1d2b6babad74e4eac8dc6ef49845c87805221e30801cc07d7805bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89908 Malicious code in registered_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d5f093c6d789311fa05f7dd0cecc7ec1950636665307c4481cf833107c78dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85031 Malicious code in elderly_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e447177c4e27676cdff9a77a4020bc2d4f393c2739f9f45c324ac3675a53f556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83016 Malicious code in agus-donat65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6ceb6a43324253761c53707474d7315800a6480922dfdadb2ee28da32968a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89210 Malicious code in okta-sambel62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e020b2381f3c63491e94b2ad756c64fe0732a462805bbc30d52e5dff8c25f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90707 Malicious code in solar_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78b8391f75d392cd4fb98c1f21e90391f8b7d57acf38d030cbf8791b6a44332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90100 Malicious code in rifqi-menjes71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3282667569acff015a4dfc561075452473e8b7d06e2571c5c31cf627747217e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85892 Malicious code in gilang-sate64-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed411cfa030ae8b0be632a54ea9af3e389ffc44361ca94228bf46b00aad5310b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89931 Malicious code in renewed_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344d64ec436c1c9c9eaf5c7f24cd1f4c8509f97f8fac6b447b64ff84795b6804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-asinan53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28f7cbd5f2260dc22cf329b7e3f76480544c660a88875ee10fe4d5d0f131d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86191 Malicious code in hadianto-bika66-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578a4b5018023257589004afebd03e1ba228e307eeaabce1902f582fdf0ad789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac5120e657ecf76eaf3b3e8d9a9382c455027f681f6b9450eade2e38d72a1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e06b144d1376b1e4b9ddd9eba5d27c30a1ee3bb1297a019dbc8c28f98a879bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8c125f5481711cd0b6e674b7ca11756894cb1f1006cc2bee4c91077a4392f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2d4da2282ccf82fbe41bb3637bdd468c63b1c39f7b7be0ae2db093ec1d4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-lontong81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cd28ee1c304c9cc0a198cbb50cb07e4997e98c6cd6c73b7ac441d380357ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e03b2ee1339a7d8de333962acae53d70e5f82ca68ae69a12d8b1cb82047f7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lontong6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7c320526cc2be1caeafe36f44bbb18c33c895234d4c6187ae1bf5fb6a7e3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-klipo93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f318c61bf864233b5b2ea3521a91b44ec05813f96e795684ee408890a273eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ruwet85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63930f1bc52c5dd267735da3b2bc98390ba2e32eecee52a32f51b1e734845c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...