MAL-2025-122306 Malicious code in okta-gudeg33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbeda1c736aac545258e971615ae6e6c531877017bfd2e271ee8df6d3075a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118458 Malicious code in zaki-serabi47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12919a7bbaec96671c0b9a2f44e1d326c55b887449032e5ee7452a0f86bc9856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113288 Malicious code in developed_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef36564b6fc4f63edea9c8ca224b199ce7ddf44b06fc32ab4bd67afd4d152219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116429 Malicious code in preliminary_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e499a2dc32454641dad2f339fdf3944c6a4a4ece7f3c771199177d9e26888c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115994 Malicious code in nervous_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdadf8221820511872cb3269c9a5e8c3f05f798babab8b0ef3905c1475188516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_basilisk_silver-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f461b6d0a1172f9e029b96dbc074ea17bc592075d48ef012ca89a666fbf45160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111723 Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e028616da646ddb18ff811b2782de9866779001ba95a77df26681f0b35e1903f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statistical_lamprey-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fcb8ead36aaf019543103e902294b48138ed35672f9ba4beb0f06d97798d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e4b732d88152b895aad85870149df9be59036a1e1e4b43d5ecc580b35b5236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109081 Malicious code in stanton-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8e24d5177c9b6686abab5197356c6c1a4a5c3ef624b5307482e99d922a97a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_vole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb23b9fe475da2bf795c0204db0a0c9791402266a641c336c88c0fe7826776c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108137 Malicious code in rina-otak-otak93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed16df55da97bb04275beeb12f5cc3b61daaf31a36041a9004bd7da6bb071ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102621 Malicious code in fauzi-kue35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad8669df26979112ffa828df1a93e0ec56855ac4bb58fa42b2d469208ab119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97779 Malicious code in fadhil-lapis78-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b03da56e990ab14d9b1265e30803e4e8051e8d52a6286a5f58ff705b78cd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94149 Malicious code in dynamic_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03eb49d96a4aeb1fd746c641ea5f338208f225d9faef0ba75f9c82e46877f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95960 Malicious code in powerful_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906efac98b70cd8f03b120fd3e4e3e4190383a717390b0deb3048be1a91cbaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-tiwul65-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511594b75f99da69c1ccc041c0efdb338eea4fd109d44ba4895d253b9e590b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-tempe10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389d4f006824ae3a6b37d272ea4efa3e4e1e9c3e092559c9c789051f23770b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-rendang15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4616b6a6fb10c6021a891ee9212768d2f839b6b6833c3dab8042302baa8054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...