MAL-2025-95705 Malicious code in obedient_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b163288372c2d730b95954b2f42f0bf8b63cc36500bc14be3598aaa441d341ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96515 Malicious code in senior_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4682b31f1e5b9fa789cff259f0db9f087a067c89a5ec4929fc13bee7f9a08fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97385 Malicious code in wily_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e479b61c4723a6b8823efe0ae424e170297971f3f663ef620589c5c1e01f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96373 Malicious code in rigid_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bce06a5cebd1a12b3e488ab99719157c69f6e76a499756979b28ff4abef7434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-getas3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df1274d9c92054969e71f8edb850aae55ba992cbe1099529cafa92aebabc622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tahutek62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e5afb262b3470f953a658718e760e204442cbf7ee56e8db0849f0e6f365c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-mangga100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44491920d3872d7723c7aff307f67a0eb16bcc2cf90dda3772df4c0edddc5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-gulai21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4c261f6564beff2ae8939a75dfc2aa2b8785399ff1f52944e7defd26aa3ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-sambalado24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778e2a19f513f34ac0e39c7fe2464532a6a022193d6f5a052ca33db0804e48be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continental_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870d279acd10ca1cc6c086dd19da485c4d21906d342b32776f2f4564467a80e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gepuk34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f07e529543601ceb4e88b7ff7ecfca57032968762f948cd1cc2c9023238efbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in related_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565a1d9ef6468ab7dbc689604354ac3e0f463dde0eaa1e8b623386ae9a646456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71cfe931cb625a0fbdc7813077e0949ce438ad9575a6d54e97c179d55e5f65c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-soto82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956eebed64492f353fb6fd241b243a8afb349b59d3302eb889e484b003322f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-ketoprak18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24eb9cecff38bfccf3dd50c0a4a28ebe650cf23293e305ae865709b88068f5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59eab1040d443bd899e9f888274dd9ebbc206e6282be8c07a99d929b80f1284e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kembang3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a807270787fe1a06a6ebd737fb0b24a5efd0daa3b7555208ba764e80ad884238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85895 Malicious code in gilang-tek81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de87f71b1a90e83fbe9c0919223c388a68356dd05ba9205156c2e486a3840f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90248 Malicious code in rudi-dodol58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a23fbf72ce808d5f70663f9bdb4be82b571a184d4fd5867d44a5de42a59c09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89921 Malicious code in relaxed_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a065d9a872a928bb91c4a3782968c7e562a678f966b017b3d44a7879b6abc8fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...