MAL-2025-129379 Malicious code in pleased_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db06e98c24f1d87cee696dca9e701de389443b4fe5287579f436559265722399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-nasisayur24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec06c43db82d166eda224cddaea645036312058f4e3efe0b1ced7457660bb387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122362 Malicious code in oktafian-jengkol30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b5b30ca53f5ff214d107ddaaf360997129ca78445d31f381b53db37eaa0d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-martabak71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed72debadcc569b5ff814036fe2fcaa6c76bfaae1feb0dcac2badf11ba7d8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-gorengan94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53388f56ece06d2155428ed7dd36ed10222311000efb9d4ff4f3bc896817e241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116143 Malicious code in ocha-lapis48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdaf5bfbd4ded2c451bac39d4683eaacf6194b922b09731f636354507827ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b927fea76623dd0223962601e7141478b0b0bf16cfcc45a7b5c4615696f5564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117584 Malicious code in udin-keripik98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b42e228c2a4b3b8994f8334f14be8d8cd174f3fa9da741f759a78e1ea3b651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-dradag50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 904a45625f766a95d5d26a2a5800d325b4afadeafc4034d21f7c30ee5efd1da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_mouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3697ace19e8a0df36653086d375e7bd806f196c27d273d6a77b3cab290e8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108477 Malicious code in seblakkuah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d71a6227d813543877f86e6253c8316a6c89a1c78f019e4aa82d3d6bb60dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in razzpj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcdbcb3b0ef5dd617104529281a275ff9014519508a3bf467d95bed34cb803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3273afdec81abc52f7a14cfc54cb4a1c6bc5d281ab9d43a301149ff145b18da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105796 Malicious code in mental_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee98c285c714836d64ad28b37167c81736676fa7412890722369ecb21e2de91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_moose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9841d5c87bc1dfee0244f4a74a7f2bafce897efed55bbc983cebdb04ed636d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6d1a12adc681e21e8d64145c80b643f0b65b9c8f15954ad0e20fe1adcbbcb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044e9e57b00aff3484b6ad9f108bdcc26715b6b67c1e353a2d30874868806ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110419 Malicious code in vera-serabi8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fac8845c452385edb194dda9757b7d937a69005026861ad7537dc39c8255d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93697 Malicious code in conceptual_gecko_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1fb327cc8f5da35fcb80076a5e97fe23a2fb9027af9edd6bb03d27b47892a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in human_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2578fba69efcfbe161e694864c2242173afcea4d84eddf21a5429cf96b02d0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...