MAL-2025-102278 Malicious code in everyday_boar_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6299b253cc8080364a034c221a6b2101fb12564a44df40da7ca9397d5e56b749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111038 Malicious code in written_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310605c3b67dd67f96d1378b349dc9557ba1ac711c3f43d767c32102c54f4b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99245 Malicious code in aggregate_rat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7fb401b0c704efd4634e9a2130ba049eda7b568bb369707f67d615ec5287cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102951 Malicious code in frozen_bovid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70832d71072ba74f84dcf52ac0074e5acff96a186dc4aded9df6545cd4d2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-ragi7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e18e6c64cf36d86314ff04e7c67a0c52cea96fa89170db5aedae310afba5840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-rujak91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb24b6037a5105282fe20f09e69354305e1ffeb5bc40a7f24d2eaecd043fb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c64e82c613a50041c3fe79cd8bfcd6370f5d92529bfbf32eba2ddb86f6183e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b9f04545d13050004d159136072f94b49a4f0f47a1fe82ffcdcae05c276e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0a9583e93402c82b8c19233bd18862ec2c80d7a8062688d3bff2986146012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lutis100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da2a0af37c074bb8706d30d2f4edf563f28e1a853f43a82f5777d4ed87f9b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-sasag32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2eac643b723256fe89823e6e1f01ebd10f28f40996f5cc77a6861408bd697e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-mieayam15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f702ab70377c6d3c813656db1b60df7d35dab4b3e161d3a520dbb2b3579a813a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-tempe23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e16d81211f9dcb2c6f6bd05f75563a063e770c838fd3c1a89bf2ab079570b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gepuk3-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3848d160cdccd79e2c582890b8b9bd67701c33d61f50900a264f669e894a7eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-mangga91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3798721105dab3f05fc14e24bc6db2c4c504335382569d1544906837079f2b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-serimuka79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b9a28e96024fd764ee71d904d5195a0b615de8c75b3fc2bc02d765457c475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-ikan10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4742b69045c5ec46294fa57dc06680ca8e2be1d28bca84fc25f6cbda5582a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-kue42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf27f4b53f7de949862e630948c0154bc9ce4edda08b7ea9dd514387741efa9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c64287c4545c406e67013f35aa59a7579ab6d15435325f4ff1513bb2f37d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99642 Malicious code in assistant_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fbd3d9c536be5e50a987cd8d79bdc9a8d7a655a4f5b76116af1844597411ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...