MAL-2025-104188 Malicious code in influential_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9921c5ca0ad9f46728577c0d62a91b46105fbc80decfe71898d61bf9e4b442f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99502 Malicious code in appalling_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31590f730ab78c7bbf01eb14a12c3522b7a0bd6802b1bd4dcb1d4063b2a1cf02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111054 Malicious code in xaver-esdoger41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575476dc2f47419a05c09c8651259441f341f15b533f2a0d3477c1d3fc5c4274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100532 Malicious code in citra-lapis97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d508aa39e18838d001c30a1148d8f36f66976c07c200d8860d895c168b01459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-saguer79-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15afa392d48ed61d57dfff350db2e948a309771ecc8c780c128a75a35df034b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98843 Malicious code in ocha-mieayam14-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284279e1724241ce5cdd75dfe7ee032716dab73170c8678cd6a03b5bc54b1ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cf7d27a3e2686829550323354c467fcb9fab8185b3e9cbe0c69f856d06556d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3de120a0d01b629babba3d9e71a887ab590b0da3c645ff1c474c9ddf556b403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98599 Malicious code in academic_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6982dfc757312535e791f3a5b6cde5db9cfe07799ace76563e3c510d2e7b67ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98710 Malicious code in external_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4f7129ca5a2d0bec7548bffe3eeeb467a5b6a2fe82bd3500774cf62c79de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-gepuk55-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef92b84b7fdcb48ae59b62987ffbad60768f12913a49c04b5812a2db94c7296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-gulai2-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34bf178ec2b8aefbd108b63518eca263141c1a9c1571d01a9d947017a90f91e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-getas34-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0a5abd284ccf45ab0aeaac6244cf9db824f7157e5657e2817e948cc7ca555e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-martabak34-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b1951dd960b244f8c510689c137fee5bff21f835f9571b795d53df52883c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-brengkes36-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f955097bca10566df00486b3fc966b72555cefb05fc2043856fb4eedd94e2835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mendut2-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80940d30b95c1e3aba6f63f7df16bf83f30836e9887715517ac628f63b7e6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crayfish_amaranth-57-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b77bf182c10eae21277ef6c1becba9d6df1cc0e76105fd029a77af94ce4e1a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98026 Malicious code in kurnia-nasicampur41-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb014c2d47dca53a557b6be3cde0b57b73ad44f920fb16fe3959f485e9baf5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98065 Malicious code in lina-tahu35-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcb3ad893a27acac571c1a4c7a4dfb5bcf068ba76855878409ad5b5d91ebd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98094 Malicious code in mahesa-empal8-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981b06973b88a3171542c7e2e3b7ffd180f5c4bc4ba834ce8e555e6a8a39d80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...