MAL-2025-113007 Malicious code in characteristic_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd8f4a62382dd3ddb6a9add286f619027d3dd684c1821f4a1668c0f2d2195a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-sambel33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b879af3e90ba6e56ab3d68f0e6aaa39ff3fafaf640912888820b0f00ffd9c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117508 Malicious code in tomi-sambalado50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0baf06cc4ca570e7586b6d3b802deb21f9a6438abd280c2219658ba847c2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114249 Malicious code in gita-empal5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ea213bedf40152f7c5e20fa30ed8c3a073308b85764fac1ac1919aead8d783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indithas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad9579f1639c8bf6ecda02c0849bd0fdc2c56b7cb56e84c6607142596a47052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108488 Malicious code in secret_ox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81421a51dc29b3963bcc77cb5f750cd4e5727e2b886d302849328ba4b25becd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99126 Malicious code in additional_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aacb1af59c2358e1e34ac2080b77f059d5c030aaa3c1170fce2cd8699e5e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107322 Malicious code in profitable_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd412a3588a05b9743b528cc2cb6816a3919167c37ef392e85abc59858c478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-bakso40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72399dc9f6857954c2465a80ca459701e84bd61660e9b17ab3ef4411e6fef9da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tahutek6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d57789a79e0d6a3936e3888d38b7cfa5549faeac671b82a0b8211ca2e721f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72640d5c205456bd0eb163f92ed51bbdc703e131e3a29e1bea35f6dc65a126ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cae6c4acaf6450694101bbdd4ac44b1bbb4b2658b18ad91702aa838351821bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93333 Malicious code in awful_nightingale_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de7fdd7c0dc13bfac0cce688d0ddcde35e0b06d6721769c4534735adf56f8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92150 Malicious code in wawan-rendang84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e91998f6086c37ea076d681174dd12c344fe55d370e1c10e5dc373254f87f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85405 Malicious code in fajar-empal89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c9b49836830fecf28680a30e19eac85f070ec540bbe7e7124ac91fa78c16ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80753 Malicious code in putri-gembus32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be93e45dd8a33385564a39311f0509c62890bee41fe2415943b1d174a61c9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-donat66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c9bd757330f573febf71a5049b09c159a7c314d8c40ae927d1044633b1f4ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-mangga54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4004d88f6eefb3161971da1d49542ea4f21593d1c014260d2961b0a9f7f027cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72287 Malicious code in cici-gepuk58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc712637132917c16c61c57d19731c3b35d715bbf77458f05cad6ebec8a10b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous-pink-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25abd71cc35b73d0ab86d548bca05e2316f761dba78235c0a24988decfc71333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...