MAL-2025-112436 Malicious code in uptight_bug_purple-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfe3a4cdb05d59555f0de6cddfd051ea7e8c5cd8a4376c1e0a4a094d88e6540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107988 Malicious code in retail_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1003f9cf685e841f4bd2aa453277f81ed30e975ec65ca61186bdd598a598945b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109843 Malicious code in tropical_swallow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4c66272408abe588a72406a7a07f3feb738f13c0b708cfff8995ac35b1e4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110660 Malicious code in wasteful_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a328ddee8f87bfcf41215ac9cc6f70d203ef9b642a450702831eabded2ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lontong24-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39efec98d45ce2ab54fd2230e2d5420269a127e72acbd9a8a30e4d76cda09db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103520 Malicious code in hadianto-telurtahu99-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a00180517926b6cb3c8e630fc63a6f1b8d7893663f1f73ed0fbbdd33054f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98049 Malicious code in laila-tumis51-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b90f7bac5bb1fca5504e53b3bb5bc24dd4871a426fcef42541a7e1f57e8f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnificent_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a88dd80568b9805d14a0f3c36b72c4d126263d2026f7dd1d87a8418a20241d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ea30e80b5f5c3b61364c19aa8f64c223ce3dcf0a9eed8a625bc8833aacaa97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a356c3dcf48f8515e5e1c2f2d37af51a55120d49c815c47ca0fae5a941520cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2438f32fc316a7c75dd615c7db6fc6bfc9aa968ab0d52ed25b6449154070b111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96389 Malicious code in roasted_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c49909392cc96e4b0150d42413bbc5fec09b187c1748a629b6fcef378ccb3f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90321 Malicious code in rudi-tek82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca45801ffbc58a828edea3f69530fd6e4a742294f6bed6bfe61ddca9617b2de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81684ac3de772477c2d69ede1261211c9aef8c1c0fc9f46fea76024919dbdc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81431 Malicious code in sole_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9296fc84ebc49ed6c3faeb577d5c42fcb1213097e863ae83e5fcc191534cffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76206 Malicious code in wawan-rawon14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17149995c0410e651cdbc820296e23d6b209ebf8d70fe0fe240e777f7eda88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72933 Malicious code in fauzi-lutis95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c5431da712bf6db10b3921c90317893b899df28abf97ba870fd3f9d782bac95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74275 Malicious code in mahesa-dodol17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a1fe2f708fd6cfdd4fb6c5a342f2ee88e6f1e7121ea1105c1c5b32e7ed0782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70511 Malicious code in selected-brown-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefec0aec95de5deec86e4c8c6151adf56b0296297ca2c20fde10db7bead2f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69341 Malicious code in meaningful-scarlet-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d58150bac0eef99eae5c555fa4aa40f71b7b928f41d90eb12f1b3d3a9f13fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...