MAL-2025-96794 Malicious code in straightforward_cephalopod_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3daeb617384b18011cf409e419e1105d25ad2dc70962f3d2fffd53ed18377ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96280 Malicious code in religious_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394898c209c86136adeb3ec5730f0c09db7cee17e7a99abe9e4a2a6c172fcf76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-mie58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1dcee7d53748bd76383916d5a5a1e35b0d1b2f77a73b2e0b000cd05aa6780f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-ketan88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c774bdd167d15327bbdf017d53a6904b31e19f446757396d6d930770c2d2c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-asinan7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e0cf0e0ed3067ef0b192829968cb18e51c621f8fc6d03382c70b8d765f2f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-soto13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86a46cf606098fa1097f0bce160abd39093ecb2a7f417bccd87fe20b8670bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10d911b6c3850d7a4220b522a71de0077e257bfac994e5c65c39cefee86f104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-brongkos100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f76ee8056c690ef5128d32ab654e78033f673dbf04ea036cad532b817bc9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad654202e1e8ed00f14dcb60f5c4e9e2598b766079ee1f6fc764fbc9e618c79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lapis48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1f6fade617072e2e6104a0a849c3623ed85cec9838a70b1efbbe0608823cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tumis30-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b506a56bf8cab4114d4a8215ee2ed37a99589de45dc04361624b0fe32460304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-empal19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47775bb3fbd901f0dd07068c1d7b2d4ea628b0ef59f9f84d2d042f92fb7bd181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-empal15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cccdcf71762473cc6297940eb33a6ed7a7f446b00f3c1ad0b8547e9f1e3b021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-pecel45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda9b7d68f2913cb40331da74e219a7817052162f719bd33e17c1e6c4b7ba258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16908b6b175c14e8fbb015444e860c0c3b89f84091385a3c375edec50219338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b45fddbcc8d9aed25a3570ba4c98677426d435a7ad761e1ce63004558a4a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d096da46d01ea1340313c560b91ffa7f1eb7258265505b7cf59a00cbf0e1db22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67b3af36d6137d04ee4ed67e05ac848643f191ec50da963cb514247fc5ee68f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-gepuk65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20504d7077ada2c6f1d9eea67810e4c1b31bfa2857182d1dc281cb9410027855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-soto27-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d0faec24494ad3614b71f1076185d48cb03a00e4fe94b03a5b57d142821e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...