Malicious code in international_cricket_z3n (npm)

Source: amazon-inspector 483288f0a842ce2c74a79361a796907c979da47d5cbe90ccf8b0b979ec4a3d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in compulsory_kingfisher_z3n (npm)

Source: amazon-inspector d731e083fd90411e352cbc4e1feb0e88ba5d5cbd74efd659877d744701b1c4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in civilian_impala_0xrequest (npm)

Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in baryon-antares-leda-cosmicsilence (npm)

Source: amazon-inspector cf008fa0c59cf2a2efbee43d63306487f972657743488c6054ff09cbe33d202b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ade-martabak26-sluey (npm)

Source: amazon-inspector 0ae452a8d0d30c635c660f9ea634c02fd4988ff3510002f4301f6b56f5741030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

MAL-2025-185157 Malicious code in sonic-kuloig-timesex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fece25ad3d8f413935c2c6c4c770ee6341259f06d545bbf210bcbd5b53d3988e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-urat-disa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48eb8098646aa0e2f0b1add62aac99707ba38ff88071fa58f19bb60ad890843f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-afofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051597a7caa0c84dad2b37d6263d5778b6daa137c45162f4758f16e66ad9300b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154140 Malicious code in dajouka-d-lftac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd6fa81286f3800e13e4ebf4b5ca5945ddb40be5758166051c1a6e49e665013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129836 Malicious code in rifqi-kupang78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683fb3eb137d48e69bc4707a65185fb83186eaa11e39c198b9214cabbdeca1aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-kupang86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29f45d23ea4c12a20b4009cf5d4336d8175d96a740c05865fbc471653dbdafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111806 Malicious code in devoted_quail_turquoise-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a58a663d92c6369f1d3fc801cd854dba5eb636fb8fb719ebe38d96de8aad14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mervin-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee091ca8df8a4af46922a842aa53192a469c4e08719388cd1258fcbc6668455f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110949 Malicious code in willowy_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83c3eb6e38a48bda78746a04770bb6350d77ae037ba4d31515db3645fa76075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100632 Malicious code in cognitive_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc27b45abb7128423e588bd824718cd2158506e36078590d231bd426de48d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84540 Malicious code in dewi-rujaksoto31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b471b2f4338b1f7467f3ba1591b40d284f0370902000e07098fc897361057b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tapai96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556f834b94c2b3def53f3e03a78de32d41d8fa5c5ea4dbaa496a38374d53d419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b37b768baf0031102e4332efc568a899699e747db1bb9cfc7dd7751983e2f996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gandul20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d7dd9812230682e8ce4cada887e99fd01599197540fc5ac7e0f4da9f1b47b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...