MAL-2025-100652 Malicious code in cold_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f28457ea77f9b424afd2caba3719523c09c3a760771e29f2934bc9c2317efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100643 Malicious code in coherent_reindeer_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90246d2c9a2a2566336379e93e4f68044f6cf38a80a5b4f50375928261286a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103623 Malicious code in healthy_swordtail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc476591b2d2867c22acc82743264a1fff9231b2051ff1d461ee92e0197e33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-keripik70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f728fe498ed9ce47eac29997c2e3f36116d683446c058219753aef8ec9373842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-getas76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0b727389aba437d910ab7938a8998a2f8baa9832a0dceed92ef613ec78d833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-gepuk91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff524814340dcb132942187730bd69d67054235d05ddc8d416f2e73c081cb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111499 Malicious code in zaki-tapai90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0558c4a6a8eb975cb854ace44136d9e7d496250a591ee797f751ea96bcb41294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99911 Malicious code in bella-otak-otak10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5cd9e02dd95d3f62cc600b6abe2f23542e333507ba4a5f41d53e9c97a5253f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-mangut97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5178b944796e20dd6869d21e23b38f8bc7031a457bf904a5a90c213d9b1492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-semur99-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd57eea9cb468177282437da4a01fd02958d32b7fca458dedaf51cc3006197cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-ongol-ongol86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd34832a5613da709c4d4acf3344fe5edd6f78a6f351a351b7b13da9890564f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-oncom80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6555eb57fd3ed875b77170d80cbeeb7bb14c11956f79c05a366ff33db4c5816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496f929a0439b9b94a97e527cf2c7c76a989d6204aae8cea84e12507d5b47f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-martabak92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac908ca6eeeecc5b056c0ec4948415aff04b6279f3fb2306ea0e5401577b5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107055 Malicious code in petite_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c24eb9ab24697db6beb58f2a457c17be613f39442a2f4e1db0e1e5afefbad04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-semur35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083c76dca72988daabfb8366627ea5178c2f96fe4dd12b8b5b4ec2b66caacbc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101936 Malicious code in eka-toge15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e423161615dcfe7eb70bb49d3550dbdf44a8560bdd6c0a382fefb37e01c7eb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kue87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33e17bd681ede042c71fa00d07baa0640af4641161312b524e43e73da7346c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-moci66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737c40f8b1a1f09eeef475d579bd83a966cc0333187e962becb5ff490200973b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-tomat38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055b737ff630b9729685f54f2fd5987e6bc5f88a343cd9ce4db71768210670c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...