MAL-2025-111289 Malicious code in yelping_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9615d737d8a7948dca082203582b86fdebb1690165aed3400e0aa1266e56cd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mvqtuj-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d960641ee3607502e1851a0028226250f7f81763e5b0847c8bdf1a66011f48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107921 Malicious code in repulsive_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be9329484254b89fcec5a155d9f4f051137478b832a4d79ce1088f792081e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e930f3ee2bfe8000a0878be392def9efa66dc9be5e773e3a9671b71df3a2582f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100821 Malicious code in condemned_elephant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa417b1c91377b7d4f3d73cffe36e2c512cf4984300c280c88cbcd942aefc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108852 Malicious code in small_kangaroo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0f391fcf7c5a40ace13ac39912dfa3b9fd2693cea49fdc599d16211fb5572b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103486 Malicious code in hadianto-jus60-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1994e5ab5d26e1d26dc8090676694b6083e7fefa39f6b7e949b5ecc39c2e6dd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97887 Malicious code in hadianto-tahu89-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7098a69d357d2620045538f95789a96b857e283f78989f64d7515548825b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dbf39e47d7675d6d4bce74c9ac4da8bd6299511918f3c6a805c7dbcee88a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90013 Malicious code in riana-nasiuduk53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e121b1fc13687bb0b564ce0a7f57d8ee3a4dca3b59cba7e70ac23e7d9693ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85726 Malicious code in galih-bubursumsum5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d864757d87e0fdabb34168c4ecea84369751003f8ea0b57b3a31b6f8e3597136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lumpur20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8192f553baa6a6e136901cd3f1628ba51153bbfa41764ef8c4acfe69383383cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8709d2a2beb48cde0afbd524b2c18a58124767b889b4b3d4201416cd33c67515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88893 Malicious code in nurul-kembang17-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d90e794de12185d71dd26978dc9b660debbfffbbc51597d89d1e3119f3f1c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tomat64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b365003964db74cd23627088a0c2690f2832c84afa996259db2cd5e66b44365a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mangut97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5273f91cf63a2a7fd6943e5dba3e60634ceb97691610aa4d872ec0671db8e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-jengkol11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6152aa5b6e98a9fba336b52630f868caaa1fa26fa9ac895bd1c1c37d975a2df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77635 Malicious code in digital_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47569a1cad783a8b706301780052b462ce4c73635f9e25e5a1267bd2f7d10636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-serabi66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7993cbcb221c4911f85d1d84fff74254a79bb43a2a743a59dfd1ec585a605d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-lodeh3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a0160aaed229a4e7d023476b9389925bf706a3103ba021863330acb0b70aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...