MAL-2025-102172 Malicious code in erick-lapis86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0499552a628677d209bdf6ac7bfe1f168bdb0bb48cbe58ff169adbbb142fa47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99309 Malicious code in agus-mendut24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0710e8ac3c265d69fab028829c566abad0fe1bb77d5abe4a8ee74d2048a8e15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lumpur54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bce97329b3e1eb9c8167c458987ec104f1867776d64e615a7719603f06bb5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98376 Malicious code in surya-kue73-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a87d154481050f9fada2edd645e61afc0f0c848b242da47dd5c4bd3eebfe55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_toad_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50098058718c21e488c4c180dbfa102c1dfc6d0e155c5e05da03e78b253dfb64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2467ba6ce133ed9f1b4093c9ebbfe35e91ae2225167d71baffe40bff2205e509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulseforgeasdehn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be996e6433384f7f943be4ae1d7021b7212f5686e8059ee8dbe1420ccab2afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_urial_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd25f63f716e2b0f17ca98b38254fa2918794568f797d6ed2963140380f1fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93458 Malicious code in calm_mite_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454579d48cb5b6de864c66c48350089e37c7f5abd6fe1dc20026c3dc60d1911f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0852980d459192c7d1a74326dabeb7b4b33415ede286a630607fc8323d5ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_swordtail_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b5b0464e08e15945e4c2e0606424a2c8c4646e8bc349b45c18fe55d8ce25df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb760085ad955f196201e8f4ef707c7af5ec34417277d16615023a3ba8fbce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8196e6a5134d1297580d5b77b7f7d20ed2fe245e0b7d89964c9f6e721093e0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94416 Malicious code in fair_crane_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b9ac4c993b205e6d165d9a9114000c80c5ffc1aa19061153e0dbfaac415274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95839 Malicious code in parental_hippopotamus_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69fc9d2f2737ac043fb595f6bdf04ff9cf26d7b4d1fc20061c533c1e2be6ff7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34edad18b8322b27f18b795f8de12692f2d19ebdafc3721de5889604db6b6044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6944f483ff543bb58add6bfec51a7f299055ca749f79b56703266041be8da7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84819 Malicious code in early_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a24e7cb0c79f31d9fdc76d2add2f22d90d61dbdc8c6077d821b9994d0dfc43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88978 Malicious code in ocha-gandul3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110f626011513614b26fc1aa106af80ca469daee3546070b4facea71ac657c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92267 Malicious code in wibowo-ronde67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c4a0df9eade270d23a6ff04f58a647b480bebe8413841943dcbe7b4bfca959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...