MAL-2025-103871 Malicious code in icy_dinosaur_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891d5807b10ffe21dca5c740a642fab5b967f0b380d3b9e8112699b1f56a513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107742 Malicious code in raw_iguana_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5e61eab17837ed7a88c2a1efdbe1f4eb50946447faa44cd03a2b0c86a0e969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-brengkes100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c900f91bea0814a0583aaf79fc16ff62c12c38e6c824ddddc0a08cc70ec8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a7af467a63f5f975b0b810d2d103dd8b85a3897cde7e08ee94f3e24f8c1f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-lupis63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f97e9ac93630bb04f2e9388da60d6a91c1190d4240a39f305e8053418b0903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-sego36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d19b9a2069fbfa29cdfdab2b82a02df33f7eb8a91144f808e6a9152d1671f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-empal65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e2e40e4d5e615e3b52d116eb7fa38c233012732c8569f1fa8de243e5b4b58c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-sego67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485a236aaba8128c2da92603b75e527379b0fb9ce1c91426bf3586365c86f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99423 Malicious code in andi-enting6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9746732ddabe81c79242bc6b03edf19044de82c8f0529a843bd295e59431ada7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106982 Malicious code in patria-tahu47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10028915c4b50e9b0175fd85ea46a4cf889c19997292602ab20279711bcd0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105429 Malicious code in lutfi-tapai80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5ecd10593429ae0f3baf2c1d58ad01c5eb4f8c8311323e310b209620732f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101506 Malicious code in dian-bubursumsum42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c026e9e668ac1f7991091f666645990d86d36b867316058be2213cf4eec94fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110281 Malicious code in utomo-lepet30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301b2e8b080fce8a33673e38102a728aa2c2d8ca4e1ebb4dba8699f8a3549d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104907 Malicious code in kurnia-getuk85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15118e6150a0707422718913d8197eda1f29562b6e5916a0bb1a53e88ee30c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99584 Malicious code in arif-rendang67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca253f6eab35112c677d995e6e4c909898ce0d7b8c247880d2d48665018891ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e96d37158d137f44d12b256576a8ab80310402ecb9a0557a2063231bb906899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tiwul72-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4430e5a1b9242b0ddb3888d0cf762e5ff7b27c62930372d18f5621717eba92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-martabak91-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83957bad00683f4a61651a2816f4c7050c66cd84a8f3ab99525dd3834cee5432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-telur52-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5ef402c16991423ec4941659178c0fd7088eacc8f9f68114171e5f921df827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98145 Malicious code in mulyono-jengkol26-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdd6ea95869c01801f18dc9c13b90505399e3ba8fbe49f27a7af85ad13e8b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...