MAL-2025-106215 Malicious code in near_antlion_blue-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e08fb65ff27919834cd6102a952602ceb31727745b9ff281b422fc005d8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0204ec25dbc7b5479dcca05198a6ac7c5ec47ead91fa75febad3ab5ff086f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102663 Malicious code in federal_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df8a7ae87fa3c212dc5b7f3de2bb22b99645bc30204c04bcffaa4f3c593f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_caribou_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cb498f29f0aa846b1f1adff17f075974ef80dfd84b7a88be71359984b81767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107085 Malicious code in plain_hedgehog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745567640c0f69bd420b5b6836b0923be63e9a38531a8f513df6874962ed4ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_kangaroo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0f391fcf7c5a40ace13ac39912dfa3b9fd2693cea49fdc599d16211fb5572b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-rujak47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1a7b1d08268691e4c1d9d01959bc73d9af8b16654999441e0e22b221fa732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110268 Malicious code in utomo-empal86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e99117439546dc6e0de0bd55a721e83fca1a8aca1fab760797462977896b37e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111356 Malicious code in yucky_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4cdba2eaed15efb6881e8829cc8e28ea1661b5ca6a705b0276123f46e3a2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2f96d9fbc90760cc28fe768897e91de563760a8b6a6c8933131c6ce1b0da5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-jengkol11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aea695625c2b19b2f08f853803af170672f8eca8ceb7c2b9f7a859215425e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-rangi95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb4549d1ffb3edd88955c3206a4f7e065641d855bc46dfcac085f75fec28704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104647 Malicious code in joko-semur78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9974b969e859e00761cd15b0d6d61eefe1932160cf2c6c88e11abb4693b3c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101417 Malicious code in dewanto-empal60-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f82adf2022a6edcca8f80bec056f309abe8b4c022ed55294f7d6045e18c592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106680 Malicious code in oktafian-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4caf57c9a57d482e91901e16add0f946eceab584c2d2e8f6db526f55e3fdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98711 Malicious code in extra_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e0f334afd3f6d77f78efe0a932e52be2598812cfb509963be70dbf7d2dfe5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-gepuk34-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17cecaf978224b7cb927312a5a1d7e5c213c547227e1f3375d22e9d646ac82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97792 Malicious code in fajar-pisang45-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c61c746be511581876248ba828d0dad53d5c902ef833bae0c061beda550af65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b72fed223627988102972284fb2bbad21edb670983b1379605c5042af90de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c578526690d9d38b856efebd59e5ab4927965427cb1e026b2a3019e087647846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...