MAL-2025-90473 Malicious code in shallow_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1a7f5b4e172ce6dfe1e516b6a5b0f94b55547ac34c89b31d6f1db5d7eae8ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84302 Malicious code in crucial_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3b8e3710b359bcb70647e4efc08c68718d9d5a100cb3fac0dca8e6b0bd9cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92910 Malicious code in zaki-rawon37-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1839924946d01b49e6935a48ee85477ed4483c97912d1b56ede44e761705010f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85375 Malicious code in fadhil-sate60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91888763ded514c07242d3edb1b1eb13336add931528b0bacb29e0eeea16b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89083 Malicious code in ogi-lengko16-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6388e58a70b3d514b25f5a81d806efa5c16684de57f590f05ef3589a7c8d0de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87101 Malicious code in joko-lengko16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603634f90a0007db0b6a3c29cc74e50db1034a9fc0ddb4baf4363040356cacb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86737 Malicious code in intact_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf59b4bd3b68a9e0283434694aa5ee9754c197cef958761c29be75a683468ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89037 Malicious code in ocha-tapai94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f8f3721d08f177135a6f90338d52636c1d445b0d7921eccd49a7e7711e0569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-gandul49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0195550d8bac4fcc7af73b9e7a9e4fa9f8c09528d59290f854f049203c15848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-empal100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0adee05f32f53779d02671319a541857f4c0097c9e70e6e0b6ca7d5c57f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-nasisayur27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4111993fcd725bf01fc5bc4d802b8621c8ad2fb62fc9859b89f6c67c40e0692e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-gudeg93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55db2f09c145cde2f78677044cc826944039585f8fec148c9e2ca826d32c08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-ubi30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62522f6297288ab8e867f441f6abbe213a9c6524974cbd540855b5c36a46eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-lumpur46-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf197510011fadfbfd8bb0a6b1c288acbae4a1cf6ca2707c92f7c36e2ef6bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-klanting33-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc00a4640412a50462cac6785e4ccb0f8486355fde029418c94bf6a17bb4966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-enting96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8455891466ad2f6548b1b89adc1a559161e22691b081792e6b5617989be1418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088a93786d66cd03307fc89604a116510830fe54d1b3026aaa090298f3203de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-kembang40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17da342a6d147a3afc67aaeccc1c8027a7e6df927b12adebbb1fc003731492dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rendang35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19dbf3f58a1983ab0245a25a3f3e56b24566696855f3d94229a62487ccf535bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-oblok33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfb6e60dc5211ef6a20a8c3d49455f09e9978b84435f8a6712bb174d8fbc3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...