MAL-2025-101416 Malicious code in dewanto-dradag96-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b555cee42193e32f76d4e38fa11e1f3da0fbf8a9772b08d4d65c300d0db5b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103244 Malicious code in gita-tempe79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c96cfa8cdc64fc3b111535a212f4c8b2e143051c1a60fa652fdae357402c0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-empal36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da336e345defb31b75c575cb6ffdabe1c00a9d3944eaf08553be9983b4b1d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d56fde6902141ef9bb58fd1572031dc44496752eb31c6aa090c04b5a179c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-nasisayur54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e4ed9269dc24ac5e9989b14d58a5396aa3174690a5ef95462c9b0b3e2f5675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-mangga59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c7141aea3a76a9354902aeaed702035d608dd6b6d02173aa247e3c75df91c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-menjes52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b574585f37eafa8f4006c234549a4b893f586063af2d6adcbcf9c042f05a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45853636c9cceeceedc2ea0701c2074823741d4b8f1b6886fd42eaff9d5ec262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109379 Malicious code in surya-klentik81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e4ffeef8a17b3b006d3f11724b005fae7ff0a05ed6e37e3ca15a236eed2057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100471 Malicious code in cindy-lapis32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1be9657c68c901623a61ff2eb0fbb0f6f4aaf40d4ac5cff497cf9b22b0e3926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109663 Malicious code in tiara-gepuk28-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58ff5156b0e3e0fcc27ac8514bd76b26dcec8c526546a34c2a4070da4c34aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106139 Malicious code in naked_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115f12f81911c5863a97f7ebc219a8aa2e438dd6cf8119db4fbe87c7cab6af13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102623 Malicious code in fauzi-kue64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d3fbf191c271cfd13b4c95b08265b096e3b8cfdd1855878ef062020ce6b080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5baac25df0a2c685e741ef198a5e8bda9a76f5a30ddef40d492669b38fa6557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92fecf01bbc1042fa73904179e5e67aaeca7eec6588a49319599176b4704e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98913 Malicious code in roasted_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a16d285a4633a58a894465e5a79912adf57bf3b4961113e89f13463ac8d3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tahutek6-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43dd38d53ec352ab924c6ae2550cc60c120b5875bb37615eaadb1ec46f211c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4df685715f3c80a0e02db6ca2c44f79b8a508ba312e5d93d23a8890a32487a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c45bd1997b0473a8a9aebff1943f08125fc1a9c2070310595bbbe663a64d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62199bed8fbbe9476d57b7e2f1220684a44b9c9f53877cc7b4a181f0180931c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...