Malicious code in unhappy_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebe1ee176fadf1061829a7d87a45e4d9ffb1bca46d5672d10755cf0a15ab12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102000 Malicious code in eldest_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307766ef802520a088c0d85a7a7f1f2a74bdef6bd0492d5f52af151ec24bdf2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b32d10f3839080a56a4bee51595308e6ee94044d7de259638a2ec118f429ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102714 Malicious code in financial_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e155843ec3c821e85f3835d0da8896163ab84d6a796d9728653a735b835289a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weird_weasel_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f515f4d6e4f6089419613b02375fb3ad110466ff85a0b6796123918d01e718ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_tapir_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edcafbe53ab446275ae219f2138748a1f007c3536b8ba7505f7837d7310d28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global_turtle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2383f49d3ec146bf74de55273f81298284b878ad00a44224b921005a9a31d1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blankenship-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b1a0144cad3490da13d9039e6a8a50f581a3da56cd102338b468d377bfdeaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101289 Malicious code in del-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52433ad53c5672022b388e60d77946a0c5df903d2c4c583ae0e43271a01cfae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cedric-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfa01c0a4f8a18105a8ce1f72c2125e43b08489a4e538e68d4f1e9ae76617fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-ketoprak93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5979fcc8a4b93423033f18ac7dc513ccbaa3eeb160f391c71bbe22026373b1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-dradag89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43dd77be1b447d64c7d63f6731c740580d6c8dac29c163b7a3b6c25cb35d39ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kupang91-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef86fc07aecf6c07d000e4f8bdbc752382de3ba2570eeb13ad754a02d4c7b5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-83361

Malicious code in yanti-bakwan91-ruro npm...

Malicious code in oktafian-lepet17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1679c6660211ff302d7da5203becbcb73bbcc77bc1a56ae420422d0489eefd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-getuk10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb761937773855c8b0f76fa941f579c95da11f03a230cb8e5f76bca9d4042a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-liwet29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0113d3da655dca4f4e66084ae4dfdf862985561a7517c838aa1aa2b88aa5bbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106567 Malicious code in ogi-gepuk35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ea44489197fdde80176a613908c08d44b31f1311b54219861f9c918b43d20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c64287c4545c406e67013f35aa59a7579ab6d15435325f4ff1513bb2f37d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111382 Malicious code in yuni-kripik1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2b697dadc723fd29a1381cde44090e0ce00731a8b8d87ad69daf2b5841d6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...