MAL-2025-96089 Malicious code in proud_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf069f5462ee7ddf9838f3281395fe4df166601cea7461fb011cda90749e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95730 Malicious code in occupational_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88e3aa6443915db45f394888e89d880c9cf2f3aa39c4dbe4152c6fff28f3501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96618 Malicious code in slight_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ed53e3b18900336ed0108afb361b9b8fa81a2faf2e5e8830a147037d992705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96777 Malicious code in still_armadillo_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce74cc2ce3bf316bffbd3164ebffc8e007b28cabf3fd786c07e4a64c998174b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-mangut22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad2a5d23cec5b6dec9dac3180d95a7fd4dacfc6b30982b9cbe40b443b8a75c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-serabi9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921dc61177ffd8176e668fda9aabdcd6d41d4a3b58da9b105079f9c479da4dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-jamblang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daf7fb5672d3f98f93388b1e3ece1772798d8f6130473df95bbf1fd394c194f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-lontong42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212ae0e70dcea9a6d2a42eac1351128ae9e6fc0ea34f7a926ecf81b135df50e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-kupat88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb966e97897378e5911cf73e6faa3e29f1a9c066cc4a6dc76078408124482fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b58f29097dd72b21773ceb7ed8653b5ba6ac76ae8590cd52f7062f31797ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-kembang80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff090729757ecc7ce23e29d0fdef2f6fb19f42a44449343e79ef3adc3a0cf5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tempe53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3760b126dd062c1a2d1e2e1cd29f2274cb6b0b56aea8e8bf82a9e2b859f2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1a556f676dc9bbb8de398cad1c42c0dc219ef41982f21da4b3591966d47a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kolak68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05eafc7d16605fa4f616d82cfdfaf1aa3e3c0341743305c5d9d3473908d555af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lapis91-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34de75df49afe37c6b3b091ddf35f120226f9eb43cd0588cd7ca036d3a31846e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5945addd633413fa1e34c2f882dede498673f0148de9e5ef48ca34cc875e0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca34754bb11f38fb951b772c74289514bd936e2deb8ddea36a8d9345885eddea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-tempe31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac2db910b3525a01622951c2221e77739567bcea231af07cde6aeb60faa430f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-brongkos26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2f71023cd28c508ed623c08add5ae607e086df495c9becb5bf2d68cc70bc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-ongol-ongol11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d53c22b35b7f332f4e3c9d840565a8c9158626a0b89381c9f7dac541ffe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...