MAL-2025-88862 Malicious code in noble_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81c4bf06860adac9cf4b55f30dc66b427e8914101eb0ec5df7d022667ff60bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91566 Malicious code in utomo-getas69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0838655ba67e665e7a246b9cea2b8fb3b15706cf447fa5922fed42f9672579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88509 Malicious code in mulyono-nasi50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f123746297caf495c8f004823e8c99fc9c124a368251d54b48112663d316d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86365 Malicious code in harsh_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb715f5d5d1adeb05f8f50f502186f6f7772d64839e321b67522efd569b7728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92125 Malicious code in wawan-lodeh58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574e0384fb1f2c3a9975b585a5b66fa9ef252aa72347e520f984d175e0241e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-donat55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9ecbfbe669d1fda45c53b180fd533e9182cf0c736fc26db16b019856130aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-bubursumsum41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fbdb610563bd98d7363b4b60a6136d751ff4a6b8f3f730d08c293fb3a9544e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-tempe4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059c2911ae3bec3d0856d870578f34b881a1365cffdbcbe2b5c22611aa35c2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-miemee44-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d16e4c31dd62891fc4700c2805761ea46a0778f18e3f847e21e659a22379ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-bika25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed593e7f55c201590fe7a786660eecfb48930ee2acded50a9ab9e42d28e207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-mendut80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c68a9c78d492cfa7486c5ae612fae6b3613c4a1e830ddd3ee557d584164593a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-bakso42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3d05017ee451e0d0542c7c17a587e12cb04755028a35e9fcfc1302c361623a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frightened_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a3cfa316fe4f578c04ffd04675eafc43d5ffaefcd311c19f985cab5d54b18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-tahu5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf53973ea8146ce838a589a3d7ba6501c509d174a559acf3ba924ded928a169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in static_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b66f882ca8ede2961b0fdf7e8e338626eb643810a01a397d8966e08701fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ebad8b8373f43d4a01d9c458b850757c97735d813b86c090e97f63faee20ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bakwan24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5157629c0f58d9382bc9515ef6983755dc05646d1fd84b641823f2a337ba7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tahu30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa18c22668dcae8996f93db945bcdca742411d91baac12624b90af76c608c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-getuk67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8a933633b7b9aef031f139369c6e4e1a7bfa60229da2ca11e7cd11b2ee8f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf9497fdf7b7d4422a80a36a26255446928b957aeb696761114cc8eb7cf9ad12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...