MAL-2025-68119 Malicious code in evident-red-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68107c03ac01e909649fa556dff7a904142956bee71ee54979da9772867430b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-kue30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655abc4003dc2b8a383e96dfe6a4642568218c4f7e399c3542fa78e4687ed7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64265 Malicious code in maya-empal68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebda59f2f41b486322e82b29c5e5f2d293b0dddb27aa60acfb7d9ffdb6d2b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66413 Malicious code in zain-kepok32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca0c97c89202b347c5322e195b27b2131e5f9e1a04e6f0297ec277c9b76b62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-tahutek44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f8c9ba33e4a37a9ab6f6ca848625b6af55c53926dccbe33ee27ac5887425fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66238 Malicious code in xenogeneic_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafa5f07778e90d34bbeda36e80dc93e66fdec79d2af873fcd3e9a3ddd82a4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60236 Malicious code in dead_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14e9da77116bec0e972ee39f1b18e0d22bcd4452d93fb83aedeb2b4d2051f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61376 Malicious code in strange_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0325a6f2e8bd827900542fd0fa7c5a978b848ce631c873a1ecc6f5f8d3ec233b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60727 Malicious code in keen_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d42ce53f9faf1b5a4b831fcbe29ae57bb86d2671979ae4d815e17707c6a125d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442c87460c541fc6524bb393571e7a5fc31505b957b16f90af8d72ec7cd6cf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-pecel81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676cddb5f442a4b79193f7353253a1ef6fc7e1a717d3c28988599851c5c75695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kue1-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc56ca3703fa8ce08fa72ce0dd24240ddccc580c42f0208765112d250dc676e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58334 Malicious code in qori-tahutek58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9caeac330adfcf4e9f294ac50c8a90541023a51a233c93f0d20e8c55ea3bcb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-telur2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01d3a46d0badbcf5e427f6c32fc48e37527e5c0815b2405dbd9cdcc36efeb36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57954 Malicious code in ocha-tempe90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7cddf2c70f856e353b6fbdc49ca80874596e3175c4894b42927a2833f7324f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54827 Malicious code in sari-soto12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7183e6f0f016efff475b53cf6dcbfa1f424989a6f092cbc8690127943fddf548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-kacang78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f71c5a129627d65ce13fe0da6715e569795e52792aaa219e9632f9fa54ac3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-oblok29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d492162ddcbc156e37924e4e3e41c79304f0fd02daaf81dfdb90750192b4507b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52059 Malicious code in ida-enting48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468427d2f21f26ec76dec02255a96a94b3cd8ec69fd9949c04399c64b4e6d2f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50066 Malicious code in cici-nasiuduk79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3041ecbb730c65dcbf94eb47435c4fca9dafd141ad8f44ced46647435ecb984c The package cici-nasiuduk79-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...