MAL-2025-125625 Malicious code in cooperative_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b499a902dff4b9b4d159e53e98ce922ba5c984a2b193b3c27f366158ce3249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127827 Malicious code in joni-nasisayur98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148894d2c4ba8309915334911a91e8fe2aad2c6406a8b5b5c061d895d5077b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125985 Malicious code in due_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4db25de5c7e05d9cd1478ad9f0f402e79fbf86cedffecfa0d565573696f7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131169 Malicious code in wati-klentik58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feb38aa953a4a658d73779c03bae63ef99bb676b8dc15313a1a749247f780e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127248 Malicious code in hot_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954b6c7a42642c1ad7185b45f47159042e32ef0a7739b35ead294977183aca68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131790 Malicious code in zaki-taiwan91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a3585050ab05c0748b8f6e82a677043eb103289f6546fc6cef47c77ebbcad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b18d8bb3023deb09af011202da3489efa315717890e05d36a46a80a05558a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1db73dfa40399db605d9b512107e8ca30488faf820ff6b7c05cd19f7c3a5578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c7ab27ec5a844cd642596c17466b941e81fc7c65ef075bbb8f20676d542a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f692fa9d98d11c9857ea1d954fa71a508eddb1aa1febacd3375e339b9629440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-tempe81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46184023153019b4fb86936e0380b80e95b1faa011ad6557804ff3e2d2bc60e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-ragi81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172bcc7cdb04c545606cbfa10f00125563fc2191a7c15ffbfe2a1b6d661752e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-bika5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4deb065c192f68695b9a521f8b9af8f6670e106a1894d029354a518ae07498b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e136da5dfdc4fcbbc426ba36d0d5788294a1e122c08a4f88deb73d21130d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f40297098d0777eb20d8fc17e5b50161ebba496cbc0ff2e28f9ee9cbd08f458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a4c70de4a880cea00bb067867023cf5eb8807634a6443dca876dda8bcbde3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-tahu60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efb4b9fe2e79ded20c49a345426d5e5ea7a91d40d88b9977e10c8ac68335a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-getas19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa32a8dd0537491425e9299d2296ecd36e184984504becac3fb3481a15a9124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-moci21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeadeecccb7c047e6934f079694d874fc46a90406bfabf81c20ce8a97623f1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-ruwet7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea4f76b9371f08dc7aae30d7f39d9ee1fee79f086a94efadc2626b93d7322a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...