MAL-2025-100748 Malicious code in comparative_sloth_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8da74b8f2b222de6a9031be12b15a80430296f77d78370cd05f8dbc9354446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107807 Malicious code in reginald-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0190c6bef403b79452ddcb23e3420f8f97b434c7075b127ccd5da27c2861bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108802 Malicious code in sleepy_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c2e0e41a23b0fd8270ba1f5b03d4e5e602745ef4b4f17bebc5ee9207687c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-lapis4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c6e0ae917a2b33b6a71a4a9f42b48a6677dfa9d82bd9ccad4ea39a6966dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-bakwan10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af266e3719c2ec542bf8a257a979efb16648c6248ab794d0529c56e5a4a42d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-kue58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83743c34bc5ee4a8721d33c693028d87a3d31cc3094e3ee9ba58addd78010e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634b2a0b0f291f41320a19bbb4bd2f507c5f6e17077a6c483b2966214c967fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-brengkes84-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc64db6ec6465dbf98a2fc4aa9bad9a09e146ad216004613c0883dab22abfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-kripik27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ea90ca82b0aff2d88ab09fa94aeb26fef7ce01f32d920d5c3a24d3ea1475ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rendang69-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8280b854ef614480cfcc8aeff1cad545b2acf15fe0023b593ddf476f8bc1d21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-tempe38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c12179881147d0965923ce9490ae81c691061b308bdc42d32525a11c01b096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in panicky_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16649e179f117d010a31750e426d939ae32c036db610d0a965a9dc49bf4e63ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-bubursumsum96-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7289e1e68c695c9b376cd0510d6a954bbcccc104950acd8408c627d6a9057504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-ketoprak48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8803ba9bc288ccffa68f1a063640f182a1fa560d9c076d54a8edf3a9cf803f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104859 Malicious code in kresna-kripik6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cced9a9d271c9ab090beb000f536c62e644d9760b6aa092ec45ae23e0439361f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104886 Malicious code in kresna-semur32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95e68cdba22e62b9df55838043f903324853809c354b73a41c343744aa156ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111384 Malicious code in yuni-kue56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176ccfb1b4650533b6aaedce77e808aea98810c21fb17093395ac97fa9582726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98860 Malicious code in overseas_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8edc6703d1490e9f0902c722de944d0378820b186e3b7a8968a0bc7ca7f04cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-semur31-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061812090eea8f91bc273144005cb2790d445653122bfb388a7c4f568ae12a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b09c03b82624e7367afff0f16870d1eb9ec54c1d09bcaa2351daf363b414001c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...