MAL-2025-114577 Malicious code in head_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a852ba57fffb6c8ffd0c94cced09d0ac8c54eba03e3e8aec6176e54f5d43d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-kentang76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7861a7417dc16625aa60170f67afbe2e4740f1d2971f560b0ea83cdfc3e04772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d679b0f55230afee6ade5790f5206abeb17e5d26997143677bb2dd8d3865dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-taiwan20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f846d2483aa9340b692548cae0cc0f584077516cbeff431c55e3d0e6d663a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d98a0acd77355460467665e9c8b2508295833bd15224fce31b1956b121799a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6244873960ba918ed51f3cbff55f829d73571fbd9403d6da1ae1ac6186f121e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-lontong3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49807172499a6e8695c7668506b113b2d929912e53075e8ffed1b6fef0819d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-liwet68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcf8b5215fa83d97bce41896622eff50ba8f85873cd9299384aed2c2d574cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-gembus45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5a3b2a3840d661da73b5759e91bcd685b8ac1606bce9e83700055efbbbb5c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2321f8a4f1a8f61af7bf7cb583cc367368a7552acd403cf344cbc466297c2731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efdfe8ff1854f9bb572f43da75c81cf37046a4994ad45a3ecc770a5c57ac922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-brongkos100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c1cd0368912b67454dd3c66b736f20337d7b8501d3abb87398b0a489fbd90f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb1235d13d52087960e2c0967776738d07cf39e5795430a26119b33e8a537af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mangut74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c9ed7324fecc8b28a40c284c2d786e20b266815ce0f4722e744bae06193d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-oncom21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cec336bafbd24109c1546c3cd2d192f032dbe34034691904a15b32ddfcb802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kolak85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880fa5a98efb6936c12f78cfadf56bdf616ea5abe9a43551abdfbabbe8aba6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-jengkol1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0756b2a1c905dbf70093186e6ef20a1386163d512cdf1f7278564f8f203e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lepet100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1420acfe00f1cbab45c0dd1454ab698716d449bdfbc4dd4be1ffbde0ea19994a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kue18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e1595976f413e7c027a173441d782d2f925d2a1bd63b5446ed47cae9434214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-buburayam38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbef87611d00309a19982b3cb83aa0feec7407c3a57b304a627c51c5b35f7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...