MAL-2025-129489 Malicious code in putra-nasi8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3639d1546d99c1826c4696c70b9adc695c8641f7d1ef1b7e62e1b4ffe985ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-dodol15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b09e1c6b21331a0426021d40c7f65a9495438f2fb910972b85c7ebc0b6e197f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-buburayam22-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6070a3cde1f73c28e8e76eb46d0a647fc33e3562b005a76f6b675d0c4be4813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112914 Malicious code in brave_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d845c84000f146c775fdee8a31e8c7ae45ed1bb9ae45c90b87ee4b4b74fb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116809 Malicious code in rifqi-tiwul5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7940919b680cf9f941a0bc9875181ff3a9858b866ba3fb923320ceff55de7a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-papeda94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc5d9319ea834ef8a041da2aa3af483a0a88802420e7e243677495c711b4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102847 Malicious code in following_hoverfly-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a55e6168c274b359d2fcfad7153391d0dd242f42c2675a1125cd73db16dfa67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_eagle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97c528063908dbdffaa84a785228e2771c0632bd4d41c10e61d78c4faf6cfb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned_swift_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367de7aa63692347973ee4041f9855a2afb945029461c2938fd82823dc44fe1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-rangi9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0e3bdef69c79bb7fda08c7c68a1169ff83297f860d3baa33e924a95546db03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-rangi87-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827e4b0c944676040ce57106ff14ea78e8b4ff9c59958044efe561eb920b4961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110421 Malicious code in vera-tahu31-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa5d4ea8809e5243b399500c19c67e1d8c850148123d81fcde4448cf5e48db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98160 Malicious code in nadia-rangi3-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47404d5108b5794bac4b5a1ab564dfeadf4e66ff3b72a2692f7aae55b9bb9693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20857bc27a7fe43089497bac3fe87a14ecca9101024ef27bb7827361b8ea6fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muddy_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d231a3dabda18ae28e26ba14cc27f71cc4706ff829442b4876d26a37b9d7e788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa8d96881615af5f2772574755d809805926412c3b00fc21048f75b72ce9bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96628 Malicious code in slippery_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586f1e976b186ed9944865b28ecb90643dfda1d9f9441159d02171c65c38303c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82851 Malicious code in actual_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a6cbac77d7cf31eb8da6856dbadbe25a08e1562aad7da445a6b0a5887f366a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92948 Malicious code in zestful_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3ee1bc23d7c504fc1e477defca2bb2fc945937aa9ed949985d090a7df41e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86928 Malicious code in iwan-takokak40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a6eadf6b2f61292596b3dda5041e9dafcf5e56ff38d22804cc274577614dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...