MAL-2025-93090 Malicious code in academic_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778f8b02ec45030c0ccf391926122867731dcc166ff9f8c96d8ba6391d2fd73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93831 Malicious code in costly_kiwi_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1d63f06fe04eeb9362ef828e0726a28fa7eb649173e0dba6e742c2a6835678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95923 Malicious code in polite_boa_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4197be1ddff1cb1f344b6257c1271c334ef03484d489fd652bb99351212c734c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96684 Malicious code in sour_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800f6450a50188935972e5051da6101301dbcfb65cdb9d45daa9f5f68039c387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93970 Malicious code in delighted_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab762d8930867b049c30ad3427f81d619c059388b858ef95042cb42dc9b63bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94106 Malicious code in drab_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5eb42e65b18a6aaab8c24cd4f8c0c15fe22021bf67e8007f3eefea277bb895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93739 Malicious code in considerable_spider_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2f85aadb116a1cfe882bb2d2bb1858d709fe9bb703fa1a37fec67c2593443b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857453020147b4af70f939632a0faea8d12d4026531810340553ff6dea309423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-enting67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f324edd187f264ad5e6b2111d0dbc933d8ce42b17595d42cdd04be8e1e9bacc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e0e9c84e554b9c2748ac275b09906b1f082c7b738f55eabff7a8066837e7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-lapis95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f6f291f47aeef492e74eb61f1ebe0aaf1a83ebde59e641d5a6a6cce09f010d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-bakwan68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15930a2b811591381ff42c412584b27f55386682300c6d39540ef84ac02118fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-gandul34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 506ec66a3ed1dd4ce1fc141071b678d9c2f992eb8882a81b3549dfd2b3ef30ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lupis13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255f90b7cdf59d6e0a853d2537c374f25fde9607df421ece813dbabbf2ed5bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-tapai20-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf390b74cdc725c30fc0eea513f60e5074671a6ec678420afeefac8a0680ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-kacang33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbda1dd4415893120fec16fe3a31d180382f6e51b1350a494e969502558ebc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-oncom56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a067e00abfb4a11e7820865cf3631942d6476e11702b96fd153f0402f68ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kupang25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733bc992c7aa9bb076bca33c8abc1685ed90d79471428124b51cde0902d4579e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-klanting72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6e87fc20b626a9b7e208258b2f266e4b186b444844673e21737ff5e1e872f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kupang10-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60113e50919a9519b27e157e3c8aa0c3a6fcd0288e4537e000f995c077b3e76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...