MAL-2025-99976 Malicious code in binding_ferret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b2889a628c41c89a4df0b4ab05fc0c65ea6073c6f4804ca240aa4358784ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105979 Malicious code in mosley-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7e6b36eb72b7783aa73fa69f6d239c8f03f65ceeef88ab846c0a0fbaf96ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kripik89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa93a38756f1c635016382cf2c5db379d62562ba28f62a8cca33c1cf1f7d769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tiwul62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a260983f38005afd7de1f89db1ebf9965afd10253aa78edc79c75430357cbf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bakwan10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d468c2ce46cd2522530cba5747d3bcfc53af4bf9219a8523275eb3276a1f06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-gaplek61-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e030525fd2512c7bea572d6f8322683c5278b0e34c7ecf57a4559766f880442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0865c3ffb80a67a475b8a70e3e7032e34e4dfec44929dcb5f75f7480799115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-moci8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49ffded8460e8dfd884510dd55083d0e7cba3a119a174725a1b2b325afdcf44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-getas24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9075e9c86ef478156c673ecb295b32f223b7c116c549157699043d26f3da3909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-gudeg2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97916d1c8d097169bacf8e16280a2221334d05a6d16f3a8fd13272adc8e7715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-klipo74-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fc01ef627415ec0e3fcb375cd474d4b166f27b7946e92d2bfc27e5f9a10ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad121ac73e0c3818036e0ad23c0e04fc9b1a45d6177264e0542dad8a7123b7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fe214c88df381ebe7c144a3e7b014985cc362f9125fdccdba2221ae4f4bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-naget88-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b48b70a6008ceadd7f246d782d3fd0ce71e4fa8fdbb0307dd979f3a8be4f7fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-kue95-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9180bd13a070375b594c50530d1fe0a928815253b76554fb3d730252e27f0288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-gado-gado30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41a4f87aa8127b57688c1853418329e673c9d3b35ff12a7a71666893a282bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-botok23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64530b2742391f01c5fb040af3a86580191a5913a86ba1c349db1398fa021991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-kue79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53382c793813b3733644138df00aa652e903512da4cd31d969411b2a83f4b3dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-dodol61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd821526b353df33257b65dff59b29eee73fbc156ed5389d8e0e555700ca54ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gembus45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba87c7f7a0b1f55eb0b5b3c2d1c1992613a964b1d1ea84a8137fc8e729dce4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...