MAL-2025-96484 Malicious code in secret_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0754d19d5763775cd361b6d527a535122ede45da491ad2333e4dcc4a7b93503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95636 Malicious code in net_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fd8d2e41dbe0f91abd34bc580b138740d771cf023191ff4e4d918cb5ff195c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95641 Malicious code in neutral_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371c40478628c06c0b8542337fc701773690d660ed9f16d5524f1d6866706697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-enting15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5f1d880b2209780d32f6ac908c31f983a1c0b3cae6b4725b3805f128e2026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88124 Malicious code in mahesa-dodol53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46f79928f240890b7a25b0a1797419a9e4c0dac5d580343fbe3dd86da91f61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90082 Malicious code in rifqi-ketan11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ea2b2266a63aef257715905fd89c9d04a2797faa77d9399d1b1e1950a21983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-asinan89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca1ad09b7b4ef06c2e05000703a04acbcbd0638f6c3567c76d427f19509694b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81927 Malicious code in uncertain_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e06746cc6a32a3a585101698f1d35cf86750653e432675078d7affed963e8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-keripik8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0b5ab23a0893ea81a0efdecdf1f3306386e91c31a48846eaf2740e24d65ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76318 Malicious code in xaver-nasi35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15428b39d9b491531eb29daaae1ea4b2def7632bf4c861c67416f9b9b6724c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72554 Malicious code in dian-nasiuduk1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76ab691ac5c2fc5afc15712d774250a60af5af7f2d629b9de1fff1ef856cf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy-tomato-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb06bb54e19101d21d06f89b5b4e447484f3a74c39ef7c11ce6033ca1caaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sate15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb957363ec668add853f8b818324a65fb6d3107dbda27ade0df99933c76ff7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59602 Malicious code in yanti-esdoger89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b76c92beabb58494e9d24f01200c9e3c893a5337765d58593857ab72d3dfde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59056 Malicious code in udin-lapis52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa8f69673273049391eb61f96ce4cfb3dc5c2b672ffce404f2492bc2e664029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54871 Malicious code in sinta-lupis86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d6529eaa5373248c5b19895b99ed607176badc188abe36287268328ce0ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-brongkos81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6194743576a98e61d97aa3e4946668def7d7f5cddbe6053efc7c023e094c5b46 The package dewi-brongkos81-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in grunt-modify-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5753491beb5c1701df1121bf553447c41a9eafd0547bed779d6c6257892d3445 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...