MAL-2025-101316 Malicious code in delighted_bear_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926e2453365483d32ab42daa6084bb61c9c5f4bc2175c50bf9301015c2388096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-moci8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49ffded8460e8dfd884510dd55083d0e7cba3a119a174725a1b2b325afdcf44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tiwul62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a260983f38005afd7de1f89db1ebf9965afd10253aa78edc79c75430357cbf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104797 Malicious code in kiki-martabak52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614b027ceb894154dabd99ad8d7bfd22e5f6d7d52b13bdbe2d34120ee7a1f471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99003 Malicious code in witty_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2532c08afbc49ad97a281654f9a2a24b54d3e849cf306dc08c45266646ecc349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97639 Malicious code in candra-semur56-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb4b4d9c2feca1452f29b7dc5174dbb1c5e9db30e0dc727ed7d9e303e684270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in philosophical_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1cadcf4c11d08148e10e6b8504fcddfed65426356bbd6fd88377a11a38d6ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fascinating_bison_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fce8841f271a4af1014c165cad10420861c63cb66b7902fd02b03d8eb011b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af4a8188fe1243cd76de7ff9aef5b0e8c88b6e7b52cd3faa54dacad0a8d443b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-jengkol45-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec675b5b84625baf53aead3c3f493defd2d0e2c2595496bfff98888dd5b9f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84199 Malicious code in combined_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fdca9e46b63f9ee140e6b2343b2acd6e9ea6b67101965e880c3bf29f8e02d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92975 Malicious code in zul-klentik54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10281b4257b3a5b6cb9cc97293ca862f9d34118322ed0a56f8462fe32b9fc46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88290 Malicious code in maman-taiwan60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e03bea74db066daa10eff73a0b009d196854717f053ac89b2b8522c4a9a0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91926 Malicious code in vina-oncom27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80d7481bf72153ff59bf3fe77ebbc7a841c3e5e3dac1fed9880f9d85cd2df77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91512 Malicious code in unaware_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6944f483ff543bb58add6bfec51a7f299055ca749f79b56703266041be8da7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-rujaksoto22-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b433018ab0dad04b2a1316fb1f4ead2e097ca56f18448029aa9aff7a87e1b8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-teh57-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5fb90660ef4d7c8862b915bd45d1c1e861b1604a3c5abbb5f2338dd52bec40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-klanting85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388caa5a49cab9ef857442f30146e3bd19797012e5ecc7dba6499bb4f40703dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sambel94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e227a525218e172a8f0216e2eb2692b63d19b2956ac9b7e39f9cf633bcadfc0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-martabak73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06e574d1b02582945485baec34f97d66e4101fa063f4d5f87237c63c1a54ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...