MAL-2025-90806 Malicious code in sure_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba9eccd537908d66c890df1839cf47d8ea3ae1e3a06c8b435c9478841afd4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86720 Malicious code in influential_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ed83ec02821c9903b7b98458496ed5eadfb3bb05ad8f699e8e900a8b4d3037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-oblok44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc890ccd64079437d2516acf6e9d96f25de589b6e87d0a145b9a7cf2f107c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5daab5edd29bd8261c5e72fa74cfa0c2d5307724f6ba145df2ff717ad59c5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-klanting85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4541242a1a140d90927cbf867b9831029fa8f845a949d48e4d2149b92da1df45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kue32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7e37a1181fee31bb5f48af783661c85fabeab9d45a129657cca6abcf06f6a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb1c0b679411d9760b408793e2edcef3ad928ecd6c8f5a32768dbfb0ddc0a9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-ronde100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecc4dbf65e451ad56d5764d2c4a9af714834760cca4070fa3bdd859b4f25d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-mieayam31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34dde98ff261799baedb089ff8682114ce965c7e8b2bf2e73c91e9b347d9bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-gaplek48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab55fabffc6328df3441523d38fde53d9f10f9f2d119ea27134d21a21d3d90a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-getuk7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d5a9efe58fdb19bdf9140c1ea4e7898ca322b2a794e809d3bc988af8690dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tumis86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafc3e412c3fdf28c9fa662f7aae5da0bacc90b09075c4e1b0717f5f3d9941cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-kue98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9ce988e99623566a720a2f90c0a072d148264322f7373f257521a622203167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-enting80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75cbe11c04fdfd0d1b9eba8b956ab9fc4ef0a88b2c716f1427afb425eacb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mangut22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7719ac6a0be14a142d64b958d8732732dc0fb557086fa86d8be56840d6c9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-tiwul3-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1715a743d38481115f2494dcb01120db343d006a3fd8b608633e51a9ce02bdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-gandul88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeec70f8493ba5ef0c4a4b23fd7144ff2476515fed949f14bebf4c55f6a420dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-lontong67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376229a452b119c0eeb9f43ea49aed7a3097cdc499027664d0e055794c597925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0615d2c1c784d232e4d565e1e3b2f42dbb64e6ad166ed5181d5f38d792c1e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83536 Malicious code in bayu-nasiuduk51-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6af050bb5970766dfe09d8173415cc27f91da6790477387919d63a0e533be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...