MAL-2025-105398 Malicious code in lutfi-gembus91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2628cf97bc8db1b0014edbab8aa6e726d946a9fc05e9fa9fb2b459c9ba23ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasiuduk78-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60964b34c3b07be7b8cac0b341ed18259fe263bdeb76042d05d88ee798d12535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93686 Malicious code in complicated_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d741595d95f7ea9aaf7e92781c700a1f2b9efc2c9f0029e3b77191c8116d23b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_dinosaur_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1869a6257e806572fe34cb5bcbe222d3d534231af69e6609419171f485bd8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-naget87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a563825280300156bb8b170760bf1bc49830749f22c60e22934936416b333f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-ruwet100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168c1b9bd49b19904ed7faeb0f3d64bb5096488b475f6be11bbd883db48d1866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80aba79d8369b7b39021adc06f13ed7f7eef8f5212c751dccd6e37534e6a02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87512 Malicious code in kurnia-kupat53-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcf6551fdaaf5127bddb5365acc75178eafce05e078ac39ab5666119d681666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83743 Malicious code in budi-miemee20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af58cedc5b709e0e19cd64e1da355dbbad6eeba8b357f0ab42bfcb4d4a78c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-lupis14-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b1a37efea466cc2b6977de1d480c64a9d9b2d82204b2fe04ae8a26447e99c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89898 Malicious code in ready_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0825ba69e0359f23e0e03cca648316a5ddf8eb3ce7ab92e819f47e32c2459741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79496 Malicious code in kurniawan-kentang23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bef4a06934647d798a34c2c7b4be7639df176ed0472ea2d2fc21b9ae99c85f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-lapis71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aacf818ef2b6c84ccf83dbb497cb8579cd560406b54448d99e33df5042b881a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-miemee27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c5220f5f7aa258be5b6ef964347ac7232eed14ffa5046fc9d582b11451a111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82194 Malicious code in warm_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f146302aa66d124f14aaa53a24532c2b1be1c75209a2f5314a6ef0560d3fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-gado-gado52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c265ffaa0caf1180a4827f4b2150dd2ff7d6f89caaab597eabcb074a30c2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73622 Malicious code in jaja-esdoger69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8675b782c53808988cea83f678826aeab624c2ce4ed3ee0a4ce672bd62ec1a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d9aceff8c9905d14ffdcd30cb2e157c4821e534c239e7af1d2d17f0ca59795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64264 Malicious code in maya-dradag19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb0b9e3f1eebe4fdbd222bda53a2dd56fe96ef9b4e02c9f5a40b8d0c698e7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61552 Malicious code in useful_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162270d2903079da4e0be7944d9d844575b3d0078c056bbb94facadc9134f2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...