MAL-2025-109181 Malicious code in strategic_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6aefb4ee4c045db92c0c5799b94d684daa588b95f905bd1d5980b5f7b31708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lontong31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c14da174e9c53075b9958dccb1b304745e8751301830bfd2470ceea1b19fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164db9e5af5c7990ff3d57d264873913db6dc739434886decfec514ef6f2cfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-klipo88-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05d4b575e3f500a50a358cad73e554bad7843d1599d12606ad11799b2227b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110709 Malicious code in wati-peyek53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94b4ff4f67bdd2eb3c738c82aa4b2bf1b402a908b661198d6dd4196030245dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stupid_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06b4f50cdcf2d452127e38b8c63074fcfe72d7434c8ead8627ae96d120fbbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kolak59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd82d99cfafc12633c246904a80ffe7ca355cc9a5f2e58b2ab81da53fe0cedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-serimuka74-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af48bd74464d2100d350bb851149ec50ec56341c1ffef45f39c4733981e092a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-ketoprak80-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700e16716f77391cd2a46321820cc574bba1bec5fd3c8bd219154bd520427b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97102 Malicious code in unconscious_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772d396eb4eda016a9b4b4d294fcf16f724766debf213809f1bdee93271402c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97036 Malicious code in tough_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf379a1e0c5195f908ed45db22ac6afe211041429e217f6b86e152d4e22d011d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94789 Malicious code in harsh_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10bb1ffe10dc27b14ed7b10ca5f66118a45ddc2eb9d5258af066b487cb36ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95851 Malicious code in passing_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf604949997ad6685396daf6fb7e141cc2094660a826b23ad71cef9d06a61600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94619 Malicious code in frightened_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91d4083fae9ef0688a7b954097d7280475fa54db76bbf2144d10e18995ec725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sego49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77333ab775f29a5f6cf68decbefbf5b62445f2231c6ee679bfa86f9e4be1d06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-gulai45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbb7cdeba2bb075a4f19df016d1910001b4f263f34b72ebd70230d1598b5271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-buburayam40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fe2d0c8775632e7d683ab949cd327d9d2e8e67296e6e27cf4d1a31c5a99741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83632 Malicious code in bella-rangi90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e57160be38c9a8e6925c5af975d2ea3d154c9cbb5adf5a89f3613fae6c7ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83789 Malicious code in candra-bakso20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6002c03107b26ec63bf4229c1f663a6a2d89753b105b52d9dab753006feea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87483 Malicious code in kurnia-donat85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3378cd4e3b15bedef361b375037324cfc6aa2b8ec002d5034a2488db37ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...