MAL-2025-109039 Malicious code in spotless_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0c82a9592db25f82c71f76aa905845b8452188eb2235e5f66685d87b92467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101649 Malicious code in distinctive_blackbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a36a2899b0c4a73da51468766fc1168a31f271f222d6a732629144dfd05cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mangga21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb04715f6365ad56712a9b3830d06508cbbcd23f67c5d8f0bc6a600ef3c3c985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-lupis14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97ca9fdd6c92fe7baa7b9a43f3e0d27133f9e9d1e546a9624b5bd02847e2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-asinan82-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791ac00019f27138932dee00d8bc92f4416f550922581bfee92550e40036f261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cefad791a4089a1a0293d0e4643d39b657535dd66e4599e312323612c5f5c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a3d8192e959097ee40a94360c836745ca3d4bc3abdd28de0ce4c435c7ad5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kue37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8600c5bcbeb2a38d48fca59000c1f7aa2826831cad383a196debb1bc06571fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110308 Malicious code in utomo-wajit23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce74f222e94a4516ad8a0aabd8190177fc06c624e7f8429b5d439f769f525409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104604 Malicious code in joko-kue46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f7cb6ea69d56002caa1c234825a62940c2bb038baa0ef23ef4a0fe5d2d0cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104104 Malicious code in indah-kembang35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dad664ee8b5b173d04db80694ca178975e9b0dc8a3781ff25cab95a07ed715e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106658 Malicious code in okta-tempe38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c12179881147d0965923ce9490ae81c691061b308bdc42d32525a11c01b096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110080 Malicious code in unemployed_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa699b878588ca8b6a42c1ef8f442f0100655c423546a3c264173db38b3928e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99861 Malicious code in bayu-tahu40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6835f719868d691f5df8526a5b4e1dae191098a03ad99a82bb77bea3c8f44459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106320 Malicious code in nina-kepok98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba40d38b41b645053bac75e255dc4dbfdc7b8f6ca0b9ca9688590134cd636f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99064 Malicious code in acceptable_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa9e014303495f5c3d502f825bb2e57992ec274069c2afa69314fd3a2dbf91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104097 Malicious code in indah-buburayam58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f32a2a6a71637a62327f392fb3392b119912212fe1a9525ebf143541045d1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-peyek24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0969bf6e6ccbd258d2289a355e1902c5d9770a5c0a334e14274173364073de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-nasiuduk45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12eb9d7c8b4b6de199776d99fa2cf56d746fda8ee948b4389f1e5c7a8bc9d05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f36e0654f8345fee9d0a86201b18218bd0f707b24bd7dad16f74167a094f089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...