MAL-2025-108577 Malicious code in sexual_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2c8842bd56d5e692004ae4238b2dd91f0c5ad532cc6fcf9c0baf450cc3e7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af29d845c6597d7ffc97c7d72064ace7c76e7ecd246ae088c7c94fd9d9bd37fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kue17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117ec205226eb9c161fe7ff627ee5ec979277ad5b4c227588a974013111541ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-lodeh72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd20d5940a456d8bac9531728e7b001788c0c0b174680dd0cdf1097ec2453a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108999 Malicious code in spectacular_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c5febc1eb59b8ae539fe0060a7b4ef5ee7b7f36fb878a46374dfdf984caa8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111425 Malicious code in zain-mendut57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d82825ffa318239d9ef93a73fc1fdd5d3fd7203b62e7a1461091be8439a96b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106526 Malicious code in ocha-kue56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd73044ece0faf4c67fdc6ef8c10b72c8dea3a99f2b6f4609d59d0c9106fe673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98009 Malicious code in kind_yellow_snipe-70-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b5872ad28d691e55317b77a121fe085c1450d48ab23f8880b4c548451e78c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e932f84e668e080dd1b29492675c395f62bba8428962e9146ff35f522edb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e464d27fa3079519534fc93dcecada210f9e1b90726f3562dd64900cc89ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e88280ac39c31d1bc4599ff14d9c7c93b28fd5f5fe40b3458eedf14023d6150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3deabb1e0a26923878a599c8a237adc9a30f556a916207b16ed54f290afd30dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c143a673e3f63c60889e253cbeb17dd87cfe8b906f6509438713ca0c1d117e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96363 Malicious code in right_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ed9a779f2a0d2cdeda3e335499668f20ea4a1c83bd1a88c6b919dbc18f9ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94608 Malicious code in frequent_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa09fe3d689140d7b8209b249abcefeba947fe11ef16a3b7d107cdbdb437f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93371 Malicious code in better_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2318ce91afd9bdbd1c7c885538b8a8c53c39d00909c886ae32207a214e60ddab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-gado-gado96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67149864300e4491d1fe829a7b10a840b3c39bc353558ed50bd3a635786ec69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-asinan84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5997fe21e667f4030ee09108f65b9bdc60a0dfe9871af5a51fbaa3af432d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-menjes97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682e37192de8bd4f19c780b207d10af919dcd4ad6bf274901f81d1e0ae6c950e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gepuk57-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b42361ef456ffcba663d13c60a83a58ff63a0658b5f626122d194d2e21ca2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...