MAL-2025-125717 Malicious code in dewanto-gado-gado75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1ee11887533fd2b34d90102aa70edc50db6dcaa4d153af7dd1270c71488f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124888 Malicious code in agus-mangut94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7768a2690673f72b8fe29ca8c5cce20d827a55e0c923fd96d2884e397954e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125718 Malicious code in dewanto-gaplek12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3bc2efec9bf88c93e4368e55e77278de84727bc86548e555eaa91082c11c3fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb78ba4bfccb4b630d49febc1c95152741c7c9e08316e6a8adacb080aa8fa631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gulai36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc4a44bc922562a57250c680378c2bb763b4e37db50afe61c91061434612cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44547e6e34defd1fa5061ee744b5325d02cc30baf8fa20a8e182340959b5754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-mieaceh26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b08599fe51d40f19843fee033c6b7ccc2f48865791a7d1e24e825a6461f3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-gudeg87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29866864e868b9bb4a7d6f7c67048430928d0191d0dd40c0e982679797df730f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122240 Malicious code in ocha-tahutek72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba63930c376af9f9d4985addfaf218e01cd78631e6d43702d612fbf13cea3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119969 Malicious code in fajar-saguer86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2833fdd4beacfc619d34e4707402fd78edd23f001bcd54c865e18b31b2e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lupis12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcf2d1e2a81bd6ae6131f699de28873a45488d6cc2ebe04aa18c0446a71f471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civilian_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcbf13431c6adbacb748edff60a01109ec4d04f3ca37f819d5cd64b162b78b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112558 Malicious code in ade-semur30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a06c3c7ecfb0d5ab130f9924bcff8bbc522871a768f3f828972015da36ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_cephalopod-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f239d45a49cf956e6e2090039b4a96e549d631d93087b7a75c618e943b3baaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural_junglefowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc6bc6e6db886d484d009d9cdbf4836e973b03ef67953e2ada0870838b01d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110255 Malicious code in useless_starfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842b5990384858bd4404b884f5ccbc0a7d581f6755fadd5c9ce56a4da8b98612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be9c601b3c811981c32b261557c2da6383ffcbf053c8a8171eea8f70405d5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485f120a7d4e0e20d224b2b0dd1b5b939dbe306d47d482c7f298cbfbeeaee041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105298 Malicious code in logical_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f33844358e836c094e0ca586dfc170cda45161225637a327d4f3e20d213950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-klanting100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b243bdc292b90edc6593a6122d2fdf1aba63b2a99a5374fc488e043684b8e9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...