MAL-2025-97286 Malicious code in vocal_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33a2730ddcc12edcd0870559c209ed03b42fb62f4eb5cfc70c37155246dc0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96991 Malicious code in thirsty_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f5e71c6d28537be6b37b5ba1623695c783ccf6531376ca05e63e8cbe065bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95399 Malicious code in marvellous_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e9dad62aa93ae301d414e3e7fc67981d919828bfdadda90766fc201c830452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-liwet9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a436f27d58808d0e48939ab4352f57fa07aafe935f7f01672bcb08751d2c195b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tapai37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbf9c7225d4a6f37ea96fcee514744594baff91b822e79bd4324cd5f7767265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-sambel18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649b93316c7169879266d6248517b9dfa9d1f5e96eac060c1bf8d139589e2661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kembang86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c90858d56f70e68948cda3f531ec39d163e3e924f1cda133e5003ab913291dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-sambel49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083c1b4180d56ce8d307761fc824e18b6103d5db4deb4eb820aa679effd35fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-tek71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b1f76eb54dcedb28658ba21b324e59d9b99f2e80c4aa995db828eb89784b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ragi9-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd23533f584390d52b128e6006387c2513c3cbf029365d670a49c8ea22d2766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-keraktelor76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d991a722737faa2a7f20a0528ef4da2ef68fe0b3a8b2587e32083fdde64611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-toge38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce82bf720048d2d13fb8565d4de291518603d0a5fb10215f8a824e55b626313c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-lodeh16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4622187892cf76f6216cfe9fe68591ade7314da5fc0d5481b4cc79b29b36fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-sroto23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b2621edacba53bbd2982056146ae9292fa970c96b6ccc8b3e0298e7210ccb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-sambel8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62339a55e67510166d42ab589deebe86b32f62f289a09cc44299bf239641135d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f354db9a6cc466cec0c7181b13efe583d5f7bd8fcbca695bcda293450074ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3491ef46d5f47bd92c53a0fc8c57400c34c0b554526ac0f7ff481029ac340963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kupang50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe5a1de4987481869eb323db370aae2b14b3258c253e656662743255b527c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-rujak76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f020963635ae27607c5f99799b3bcc5c3afe7e559a4c2101505913cf750e73b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adorable_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574f7ad61ea6de6add761ec59caaed563fbc5a10379054edcc137a681dd00867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...