MAL-2025-100046 Malicious code in bored_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11715e0c2aaefcc99755eb2ff7d1c2f55ff68c89ba7927f24120200a33c803d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105305 Malicious code in lois-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0fd2b06f58b94c952abdab84d1d3c7532ca82250d2bbb33052eac9e89c6561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-rangi63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda0a39a63a1f526e06fba361e3c33fee256317d8fd82a899560ef3d22c59273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-kripik2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bff275235a12b3c1258b90c65b2381bfbfab6747a2b612095040849363420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-gembus12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafb8cfcd3aa8dacd17294f7f8f891814c1fbdbef85b44f48426f43bfae7a4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-nasiuduk59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b56c4249b91bfca8f9477c3ccadfc908ba78b66d488c8fbf8b909e40e1b156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lapis78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8870fc00e18ab994f7bac730f2f0245432cb332c63e540686e52c0754d8b7ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kripik80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c158faa847f480533bad11de0d4322d466475de3050c6b2eaabc4bafc0f9a090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d203e12124f34a1cfb4a47318af0e678cdc0f93f2bb6766dc8c4f61737ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sambel34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a122efa4e42d8910da5196f0b76dfb78ba61894a7e221b31f2b3365911613649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-klipo90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d664b56d53d7eea4adc02d963dfb6435d252e3e37aa236446132fe982c5118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be04aaa391c12bd6d586f92ad274b8260a23aafd81624ec66c3ae715bc2cd041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-ubi24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7258a80c9210b8bb6f0c3e43e7132351cf96fcfb12e039e33240fabeb43cffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-martabak41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92af1f38a3bd2db1e8bfd05cc9e23f14abc27a7426ac7d5296b9289bc66b204b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103036 Malicious code in galih-lupis30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ff0cb2d59eb49f92c11588bc51b667daa082ad074802f322f93f0e0c425485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103275 Malicious code in gleaming_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938345bb44f4498560d60b248f4ad68a5e62a46dcf67e2c111877f1daf5ca7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110544 Malicious code in vina-mendoan33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f49fa65509db4183dca7f4ee133dd8c2591e4295eb4162e59a9948cbd2e8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-bubursumsum12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce8fa8ccf22f292dd5cc69c5e2edcd8f1fdf773c9de4be30ba4b6fcead1b3b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec613a157e3162747c4ff9f77bdc1102b70083888c703fdfd63dbd7baec62369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kupang37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35866530f792451b8fb6739bcca991275f9ca303ab7d117597b30f7d1b42241d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...