MAL-2025-104780 Malicious code in kiki-gorengan31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d38acd78cc9af4e38dce40c8137805759727d01221f32040e0127eee92bdd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105435 Malicious code in lutfi-tomat91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc055d581a1fc0b6952d501ac827e03559c5fdfd32c17559fb712a117690383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98801 Malicious code in magnificent_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bf0b5c2ea8db458454253bd7c00583924d4bb9d4dcc8fb8da39a6f55fe0031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-klentik26-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69bbaa7a1866731dc24d31b703b5bdfc3cfc0ab2a8136210a9fc24af7dc9bc95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98227 Malicious code in oktafian-klipo65-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be5c6ca345c7a8ce47993d0479195e80f4191af68314239248f0b56e0e9f4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98425 Malicious code in tuti-nasi5-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a16529aa46daaf92f15801069babe1de93ecd30adb205a4bf6acc7b3478d0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec80559bdc407c785050b785de4cb9cf9e494f0ef123f4088581d9804579c609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64779dcc8255f3da41878149ab1fa5efcdf5fee34b9704e1dcab238ba9f2aac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67af8c9107c8fe606df7b4167bb5af57a68e9aed145e5ded8b6cee918eccdfdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dd66f6c46d8e6e138e584fb04608d65ffbef5a9ab62ca720a0985b8dba4d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b021421668ce81b271b2ea0d62a875caf1d5d2455759b176297e74ba4f5389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a37083ff25b5923b13a79c6727f78d8b16b5f8b5ec7f6506caa67206726c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c82fcdf6f59600a93af1c66d9656dc4bd302e689a0bc0028c49d78e2beb1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8b14cca990b31f6d20c8dc8b959cea99e8b0e90dcecc7dcac118b9ef734c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9657cfb09041b335917432fc062180f093e1bba1fb320261a1b566f22f9753c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754f86284871c09b3363c9168d34a44ff3eb290972b38a8fa3b01cb8862b3265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294ff750f8397faea481585b439a83f24ed07e5cdba97670b78e953a1de3a268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df99db012ad2953c3ecfbfbd910b15a38fd9879f445176552eee9654163cd48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appropriate_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a871ffc89b318ab58b166413bb90faadcc0771a7bf338f36a43e8e56d8abdaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97180 Malicious code in unwilling_lobster_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed86f8c76880d5b261a0b299d6b863e4361690e53d5cbabb0351fabf80b2819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...