MAL-2025-101452 Malicious code in dewanto-wajit4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0447c2f0db53f1dc2077e98950f3d60fe62ae2a432f26f5848998c8b9073fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2574abe41d98dd153188f9c04ea0f2035e69f89ce5316347696d23322431325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sick_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519c4dbf8808c1a2713eb5de97f65d1ecbe2f83bd8fd6a3803ffce9a8e24cce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d4fa39c78a633faa491e7099d747aaf3e77cc3103d39045b500e31838334ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double_hare_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4c56b77b2019e468d628311f719731fc5cd47ebc4f78a88bc5f6cfc57de806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in causal_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9a7f47b9b96080c879aa4aa7a8807dbfcae74b352fbc1871d20f7b6ec9087e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12fc9257b8e0132c19dd96aa00b801648bb225b2ca47e25076cc388869cc85a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933798e2b2e4a45eaa79b073567a7679dd7ac8b4843a389d1664a21eb6c923dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ff985048d68c4c6ea0ae2b9d2e89236a84e0981288707ec7ed069289a683fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2af2ab03eeb598b4712e4226639691f39b3b5421a391438c816404b6ea5f32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97509 Malicious code in youthful_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e134520f500ec7cbda3403225115aa03b8d2ba33743dbb3d8b250e70f187886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-bika46-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5e5265699fb79845e3bd49fd8a7773c34a187f4880f5a7960c1d6a6f2ff341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-tek77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905e8b42d5dbeb5352d772cf4ec6c7c8f189e71afdb577ee4ae46b255e082350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-nasisayur71-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c15c5acd6d57080dd4690124ec4fbdb9818e3b54004726032166c3138153829d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-nasiuduk55-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d269a2c997fa3425730789547cba5d3c73ea4c4da54d73699c757fa6a62b3b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in human_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60397b8537f5bdff73e97b0c84cd23b7d5217a17d8005bd6595e0987ecf750b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tahu4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 551d1924e431dd796056496560df33e1825b29373d9f39d386dd83915c11d276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-mangut69-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a79d0527fb74e0213217a3485f2f966b0a01c613616a2e128791f86775601c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4138b265b8bb3bcbe1b130ffc37acea0a1749dea57aa2fff9bc5b571900d0f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89689 Malicious code in putri-lepet90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca191784aa313ff4e283d139f41d495f141709868a274dfec8950cc542992b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...