MAL-2025-111290 Malicious code in yelping_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3f02a000ec1351b5b207c4178f2dbae91d1b67e4c53f43b384d8374d2d8c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108919 Malicious code in sophisticated_crane_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea268a969f0b9427a830df79a52295aac6fe7807bcb7f09833dc43aaf71f2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-dradag53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5aa99ea21119e76c0cef750b817eab4970aa41ac75308350458457d309d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-asinan33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83e9e95dca5721ed2b5831b076782bcb5c24ed586a660c08b1635e2a5e2e4d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tempe22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf4650996651239d3d197d6ce49c50bc994039340941db32287a49bc1ae9942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lontong72-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8f0dc578e3cbcb970d34d051d65843de2330b92c9dca0a46f6bf7ea3edeaa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-keraktelor70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424cd84bc9c1d0e93e38ca8f8f780f0015cbeb4e66fb3f149d988194c88eb77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-mangut73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e030e0b232d509da507b2186658665acb9a130fc078e551e12733de8cb2d3b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-rangi63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda0a39a63a1f526e06fba361e3c33fee256317d8fd82a899560ef3d22c59273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110543 Malicious code in vina-mangut87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5755af8de971c5daa0779ee71d9e3ae81b1047dce10c3e6b322ac53512d154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108009 Malicious code in riana-empal71-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a1fe7eeeac763ea8a942614cd7e54694f60d33e6540a04b82aa04f82325411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-getuk5-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e561c58bb33a9dd5f0f481614e37f42faf159e3d85958eee6a80b4f654d5e567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31798c25ca7d85579f2f081e1427b392e811b924ac06d2f99a6c07f59083db8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-bakwan10-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0207ec3a7b87484009f09dea594cb37a24f12b6848485d27848f94c797d61d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-telur44-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c5c85e26a3d42e5b9d5e182e9867dc1a7bc00e280a8f6f728d94df75960e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6713aed34ef371d99fdd4f71523b68000c7945858e1a90172ddea15f4baf0ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8637677b82a8eacb01888a5db57e788b3b02a9be43a16424add6fe59a6ebe8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kembang61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d444dae40a48dd8a97bea7e686cb7c9977023d26b2a93549944bacbc1079316c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107972 Malicious code in responsible_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2d7639d30fb741e22fb02cfb801411dea7d7450442f7e628115321a495347e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102620 Malicious code in fauzi-keripik27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7292c1ba620668cdd2bab39e11606696c4d9e6070b2f4bd9d6b5a4a5332cf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...