MAL-2025-96419 Malicious code in rude_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b6e3696a6c43ddefe0f48dbdd2b2eb6e892792d485bc075e39c3eb369a998d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93528 Malicious code in chemical_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799686e5c13f3b41f45bde4a13ea21cc77db3c42701c63a7681f40daf48fcee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90795 Malicious code in suitable_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af9e210e79c18823cbcf28c9facb505910b469fafe0808390cfddcee3682606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-ketan66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f2e301a7481c1be9dc4eb6c5dd1f675b7213ea2e0114c212d9554084f09996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81611 Malicious code in technical_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54281e89c029f985705cf31479e6ed52e79747dee59853e7726a13b3596b2fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extensive-violet-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e1154ae84195f308bf98af0e1083acbc077b517294a213bd03a881de7c96fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-amber-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7ed5737d0a27de22db1f7da9f3825185f42c51646a799a6a41ca6b78eb44c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-sasag39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40c6714ceda13cd333dbba37f26e815842ef4f89b8416c7c63d98a047210173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62875 Malicious code in fadhil-kolak50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06660cbf5ed5824099fc63a8f5651c97e6620e65a13c02f572f3db3911a8f535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60453 Malicious code in fascinating_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da592d8d6e9e840655ef0f806387cc20f18a228d58c9007d4306a433d7057ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56462 Malicious code in gilang-kue76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8f08519c7785aeba0f1e1b328e932d2f95e34c151e1318832e1289791ab7ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tomat14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a606b0a57ebfc82e7927876b53f72c4333cf6c60de9a53c064f888de0554d91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...