MAL-2025-102958 Malicious code in full_eagle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05faa0dd6e82b562a5241cfd6dc10830f98b7863feb9aa9ed869fcbae924e3b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104743 Malicious code in justine-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b45be9368a238b8e91ac8b987aed6a163ff60a33e38cabac620484a61babf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102405 Malicious code in explicit_puma_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8700921e31828ec482835048a22c9b93ff23103ad02dd723aca641a7845f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109359 Malicious code in surviving_butterfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6493b2f190df5ea91e8ec68d519ede102edd23f1b672d1051cfab5ac7e34c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100106 Malicious code in bright_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5e0169217a0dbe6624df28ffbe127a7a9f18820e5677ca33e8e17762f4ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-rojak74-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0214281bfbd66e4d77b60a9207d8311d965c31dfd0a8225f997255f515b2c83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82b00fc07c11d6037e1874672b560715863b8cecd1f91497dd6cb94e10c1a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kue47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bebc1ac3b6d6599bab7933e56db9189e13bb060bea5eb26a5986d7eedef924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mangga45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8a19784f9454f96e3caa3422541fb2bc5774653dee30080efaebb606ca9bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-dodol1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89370177a218c952376d9c7b9ef34d2841a0c27e9764f96b732b94bfcd27127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e536fb261bc9873f83aee154b6f444c82244d10d3e275b340ea6ba66f5862e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34a283c76f22d389607b6ab9749d81f5a71a24777bf80cd8fbc19ec7085fad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-nasicampur86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a27b91877eecd03c11fca27144aa9d89f808cd81e713312ffd4227ef5d4bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-miebogor95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45fb28204711619c97f4d3aed2f7a3c20ec5c5ebf1e432749c6dc11bb623c84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-nasipecel24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4925389ef1948b243797cb2e293d2a23928a7429653a36efb0758b0643390817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tapai48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734aaa426b30720ca074f2b78ce41c771e01d4de1fd58db18ceeb2911ee3d5cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lapis43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cfac06f2d70a3ddfd566e4222a8d1b5644dcdb70b60d7d09de759ab5e4042a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-kripik31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001ebd43cc343060f7aeb6c12776c3466ff64abba77091f125422c9e0dece5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc1cc17f232f2575d24be8f16d4287146b40d75a90afb17d7a813806b958cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-gembus84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee2958ac3c6ea21bcaa150734597693828d639bc6a617042f5782efda33ac70d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...