MAL-2025-103216 Malicious code in gita-menjes1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cacdd1cade3d55c4571a45eb35b56b713a37abfe05cff3cbaeef22228a907f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadbd9520611bdf09f2cd31f91352b15e9f6bf15b918fd970210b2be6bb07c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92074 Malicious code in wati-sate7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7595722e0c5a74da627b345afb338bd7ec652dbea034a8b968afa844e7914627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mangut3-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1639d25b74f17a935b363e6d81c6b6b594c3bea345ed1ce9d4b3b1dcf885fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-botok63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8ae1f04f5f3618738902b4a2a4d4719d5897e1a60e6bd992f74e816b1e7226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80047 Malicious code in mulyono-keripik14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1046aaed522ef46b75f9eb111e0752f289c74b896908c55125d53221b006cc06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71846 Malicious code in ade-nasiuduk97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd065a3e6f26e3c81e12d63989a7f00a650dc9c1f6a18a7c3c7762d77e44ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow-turquoise-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d44d75e834ee50fb61fd467a3ac5fa3cfe9da26f1d1fde2261751e04305cba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-jade-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040dc6f7bf8e9144f2fe5d2b5b036a567e598150b3d901343708cd1051be7a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-gepuk90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4957f189662ba7504dba17d1ae1ff8b213058bef3a66b42c230cf7c44a35eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-nasiuduk44-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b860efbd44fab89f8e1f19751a4c388320d529315b2a8bf53b352b74c524df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62496 Malicious code in dewi-miebogor2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df46a5e57f9ccf235844d8631187fc2cede6a05118586d69d6ac263352475ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8637e4c2c6af8ae74c15bf18b6cc72edb997ad5a1c728692be81ecc49e2dc22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e0cfe9b95c72cde349f006584aa13976a32d9eec1eb683a5c4a66fb55e67b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e772c1c282d20164f8f7d27be78eec01b592bd254760dcd44b23e9d4e28a4bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-takokak31-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba23229b4847f3836c72f144d5d9fcfb280834e6d09705a9d488185e3668101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-menjes2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256d823f1d1c58f5ed81a33456dc6411ece2840136b6e0d370c55a153a822863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55365 Malicious code in bella-kentang72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d058718041f63f3035b55acd48446784e2004fd6215ef24ce102b96646b7f85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59865 Malicious code in zul-klipo23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f213932f9877de25bc8d46889ed67ae800cda9891c79a13c75cfebc02c0e00aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54936 Malicious code in siska-semur4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c240f3a68b1d570c1503cdc8dd4a849fc0e807fa8e2ce5a7e2d9867a8da14c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...