MAL-2025-86842 Malicious code in irrelevant_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de75a018054b50148358589e69113326514fb187becd92685f0e2d0eede8db24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84107 Malicious code in citra-liwet28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d941a48c5d34045a74c5807b83dc35ecdd6e94c5f49171aa8a4473671e6c888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88939 Malicious code in nurul-semur85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec13c157ffcf7cf5e7021a8308ebc6df9125ad81c0813bcdfb809722bf6939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88406 Malicious code in mean_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea56a7327a27356763bf983efb7d6af981fc40b408c197766feb19eacc8eda34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91446 Malicious code in umi-kentang1-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8adc2e76ea96e2044f148a47310f61fba0240766e2232f815d9dba1b29baad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87328 Malicious code in kiki-kue89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf63452f4bcd93165e4d1e8b6849392758e43ccc4e00b9b5749563213c9cae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-naget63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060a216172fee32563692d8e1329b9bf68388113aaf4276530ea053ea122bd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-pecel81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7b2a7cf805c5294c0e1dfbe5eae81c1ca34791d374bad53c2b60fe9af443b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-bika91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ac2bcdfd302bde71c8e2982b8f11605b4cbccf6b6e707b46bec54737e28f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-kue59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2ff1fd46ff4fe7356126082cd45ec4a2a695e3caf1fcb5e54541c870afb06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kembang42-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e127d5f46ac2ee0dd35701ccf4162791304c89194b004751a88c6291adf65659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120e56370ba1f5d313429d447a0b1ee6771bff090d941ee40f3fe8d303ae4928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-pisang51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 453111aa7d229b8cf02a92e0a535a99b5bf8e85f56d268e0c446f4ffddca3900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba8121f0af0c49837dbef30a3ce3042602a198014833a9fe005e463b3c1a175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-getas81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0807f7aed4be31c18df48e151b7f86a683de3d872cd34f406287d839a815d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce47589b4a125abcee377618100517ebc85c807d85e623040619cad696120e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316980ff78d58266fc445aa223c927a13283d3f3891666ccd9260d80b345d2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81590 Malicious code in tania-nasiuduk2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0644c958da3151dc1902504e67451275b37d8e52eeeb2a649054372da3b3a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77651 Malicious code in distant_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0a8fe7664f629ae1baaefa73f68632a12d35a3c70d296c394c973572a746cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78608 Malicious code in hadi-rangi69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f933c9b4c8dd016b34028ead5cfb6fdee5022601170cf07bf5e18b2c49b9bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...