MAL-2025-98870 Malicious code in plastic_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a506fd44700f1d602dd8d67204c2cb799f713e6e2a5ac7c7639520a97091fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-pecel67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53af48f9d152756db1f736db78368b941ad0e3b8c31d70980eb4ae92c6249ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61852217270a9029d05091c9f3e980f0fad1ccc2f8d29c65078051c985b72e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83538 Malicious code in bayu-pisang81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52751ce58c1cb80a155b72017c3e222682de40b0cd05e90c32583e91a04335c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90713 Malicious code in sour_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd157128457129e46bec12f0e06d01c1967ae4565906f5caa5893fd342a48403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teenage_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e3e649d8456df58cd5a634ba158502ed3ffff103e9e8158c16a0b7ae6d9b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-mieaceh28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83cb7c3fc7165ee2dc22c65fb6eaeacdaa9c1c61ce99d52d8e0f477d339778e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88769 Malicious code in nervous_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb87889b40115c097be8d22b2e38dcc37c84c66bfcbb837dea4067339456046b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79787 Malicious code in lutfi-moci65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768e363ae0277279c5e6ce5a4212155500039f214807f3eaf058a1fecf178a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77073 Malicious code in binding_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d13c4118748df9df98997f4c7c43766a97d09765b585ad6f29dbe03780ee37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79950 Malicious code in maya-kemplang26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aaccb205c94488a9af3f5e9e9b51038d7ff6ba6769ec890523ee2ec362c7a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-rangi38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1bc7b3bcf3dca0d202f3059711cfe367dcf308945bc2d96b9dd5c908abae6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lupis14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf23dfe71ae1ec3711265ef528b53e1f32878e82c3ab6c0b48428825b269512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-semur53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1ac369a8e06a6c955cc8ce42edbfd06d610d2505f0d911011d24dbd314ef28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-martabak30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6450ad6f9335fe04e892b762ef759be9ba60b219e6843dbbeafb97b6095e5860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75550 Malicious code in surya-semur89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af5225f26429bfc487b48576db2c72d8d2f24fa31ca71ab50d97c16c2e53f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lodeh97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7751eb56e6db6a79ada6f39122326b1c496978cff2b6a79c8027ef2d13e1ae6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69445 Malicious code in miyool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa95da6580df72388a2b491f52c1756c733e7383660348c461a4a412f66ace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68924 Malicious code in intact-beige-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f40bd00df3fa14afd0e27eb130a607639db01e259743e98838e97a8d424ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate-teal-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c634bbb2a7ec8a5a8b68c26702cd247255594cd5ef8c755b3d6814212b475bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...