MAL-2025-107976 Malicious code in responsible_starfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a16dec854fc0c4e51869cac3857e64af5a9915cf1de029d00d242749c210d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103608 Malicious code in harsh_bat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579da7b0865c7bb037a36430286687c85f5ae676cfc69390157ff8a489ec8a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100977 Malicious code in convinced_peafowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dd3c7d15f9ca572cb7db00ec0a021f3110320a5775420a4671e1c66838f18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107271 Malicious code in primitive_wallaby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93932ad539266eede24b52793469c92ce8be48cf36526cf98046865c7019d088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-bubursumsum52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f059ac0a9e07d103838654713b221bca34e4dd267be51c788b63a422c7ad0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-kue50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d8e01cc7aa6e300a5895f621cf184d65e2b685862b7b4baa49747d45045fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kemplang41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fa13e1782a72a65744b3bfbf7ff39e00797a437c4d020527b64c4b3be9d7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-ragi6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29aee8c467573c1ae5e346436ff57bc232bace711b43a993b8a6e15c5d6a0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-bika42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea91bc8de769551cd61473490948ecc38f95b7d0af53b3753dd2fe8e91032e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-wajit92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5e2c64408c31a41e139186c061c1ca80fb52413995caea2c7d72c2b5dbd04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e35a926257b6fac6ba028cd27d997431df7420b62d3f9ce93f4a9422e749ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-miebogor42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8214c1b7bb5c68d96fdca8379f92044f8f95a42d393bdfc71f0522e965ec9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-kepok91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7215016af02a58e597c3cb58acdc1b925d7be74e6b4a6e332a4b0d7fbbc700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-semur56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9052772984790f5609f3455c093c7825d83e375903088baa187fb8230e7ae6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-taiwan97-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad774cfd4d6f72df2b9d840895e45ae2a2077571a05da4594010631249e6356e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kupang19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d229c4137d330ace6afa3a21542f24a2a29bc3174432dbc308a17907dd21d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-empal37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2df5ba2a5cff710453f729303d67f5d1db6ee6cba5335c43d0d0cf5b5bd02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-klentik96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2f6d7384b5556b2ac476fe58c5b9cacf879574b98a5912f6a0f1a5a34ac76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111613 Malicious code in zul-sate35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f8a12cb23a6385dc9d55c05595b242b6c3adbdf36a60c10250f2d40ec2c901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107475 Malicious code in putri-bakwan1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c424d08d6bb5ed0ee060b23d974c4e48c8c0065af32f89d14a9e6d969fc1693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...