MAL-2025-99954 Malicious code in better_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12110c0095585ab159357cd3921a33adf49fb7ce8a6db23b139cf985a4e9e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104797 Malicious code in kiki-martabak52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614b027ceb894154dabd99ad8d7bfd22e5f6d7d52b13bdbe2d34120ee7a1f471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tiwul62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a260983f38005afd7de1f89db1ebf9965afd10253aa78edc79c75430357cbf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-moci8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49ffded8460e8dfd884510dd55083d0e7cba3a119a174725a1b2b325afdcf44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99003 Malicious code in witty_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2532c08afbc49ad97a281654f9a2a24b54d3e849cf306dc08c45266646ecc349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97639 Malicious code in candra-semur56-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb4b4d9c2feca1452f29b7dc5174dbb1c5e9db30e0dc727ed7d9e303e684270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in philosophical_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1cadcf4c11d08148e10e6b8504fcddfed65426356bbd6fd88377a11a38d6ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fascinating_bison_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fce8841f271a4af1014c165cad10420861c63cb66b7902fd02b03d8eb011b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af4a8188fe1243cd76de7ff9aef5b0e8c88b6e7b52cd3faa54dacad0a8d443b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-jengkol45-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec675b5b84625baf53aead3c3f493defd2d0e2c2595496bfff98888dd5b9f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92975 Malicious code in zul-klentik54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10281b4257b3a5b6cb9cc97293ca862f9d34118322ed0a56f8462fe32b9fc46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88290 Malicious code in maman-taiwan60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e03bea74db066daa10eff73a0b009d196854717f053ac89b2b8522c4a9a0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91926 Malicious code in vina-oncom27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80d7481bf72153ff59bf3fe77ebbc7a841c3e5e3dac1fed9880f9d85cd2df77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84199 Malicious code in combined_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fdca9e46b63f9ee140e6b2343b2acd6e9ea6b67101965e880c3bf29f8e02d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91512 Malicious code in unaware_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6944f483ff543bb58add6bfec51a7f299055ca749f79b56703266041be8da7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-nasisayur27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b43a8f5bcd2f628e1dc736a62d34e97cfe4ea633748ca9c57c02eadf3991b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93c540f19ca2a21f6d73a1e28af9cfec9c6230dc4724fdec1f02f9cde43b903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-klanting85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388caa5a49cab9ef857442f30146e3bd19797012e5ecc7dba6499bb4f40703dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-rojak38-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 201aa3e65d17bb2f420dceba5c1c1ea400f259d1a2e316f267615e608d76807e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-teh57-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5fb90660ef4d7c8862b915bd45d1c1e861b1604a3c5abbb5f2338dd52bec40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...