MAL-2025-100622 Malicious code in clumsy_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5e5a36d82c60adb7e883d14c411dc2fa3dd5b6dd0c959f28fd7cc0b8a48124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106043 Malicious code in mushy_raven_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e445feb7e442693c833fec40729edd4cde0dde0501a91d57c763b54570fe4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103924 Malicious code in ideal_vulture_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6918df3b8082b4e9e7adf722585aedd0c16ecb9266caf64df66701c6ba981a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_lamprey_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3254522340bb7298ff1ea26485f035ccbb26bb8a5eb32b26c265fcecbfdca50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_hornet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86277e2d817c9dc72721b10eaed1188a47416dc80e68875765874d67afbbb8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mervin-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee091ca8df8a4af46922a842aa53192a469c4e08719388cd1258fcbc6668455f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105979 Malicious code in mosley-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7e6b36eb72b7783aa73fa69f6d239c8f03f65ceeef88ab846c0a0fbaf96ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107848 Malicious code in relaxed_snipe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb2d3c209a161c443d38840fa00c9edf5ce88fb4b269c06507bac5f6c4d5a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_elk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60502b7a5afd30b9e14dd75861886da576a8e04330dfc778a385b4c0c6e0c243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-lontong48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fde7ab0a008fef28d49a5c176ef55b70ed3f0e9a71ae9d64131a4c02f491de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-gado-gado30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41a4f87aa8127b57688c1853418329e673c9d3b35ff12a7a71666893a282bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-mangut77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f697c328d39021155ebd5a1cbb58190069dba64fcbc14beffc56143591f07228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103549 Malicious code in hanafi-moci94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997d7b98112050229465f4eb126eb354e2296329e89d18a4989f0a42c3948265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-kue79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53382c793813b3733644138df00aa652e903512da4cd31d969411b2a83f4b3dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-ubi51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0be0d559205f65d5e9002f51b459b562157e619d9ec6e139c8ccb64056e1883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kripik89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa93a38756f1c635016382cf2c5db379d62562ba28f62a8cca33c1cf1f7d769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fe214c88df381ebe7c144a3e7b014985cc362f9125fdccdba2221ae4f4bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104107 Malicious code in indah-kentang79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b60144ccded063f979650061088190f8f5feb9570d5b0b145b362f8a46ec021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cruel_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87e41213732c581deed5c3df79b634b46ea38c47662fceac850f32dbe84b722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0865c3ffb80a67a475b8a70e3e7032e34e4dfec44929dcb5f75f7480799115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...