MAL-2025-93993 Malicious code in desirable_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa4e9124790c8958f8011432f3723371f8ca81be36496c9f5930122db1b3a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97384 Malicious code in wily_aardwolf_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4638a4a1c3027a32806ea374757168104ff02da65757b1d55878b6c575ab7bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94902 Malicious code in husky_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a464b6eba1d915b1bee2a0d5e184c317aa4d57cabc052ace859b3fa5ac0f87a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in general_dolphin_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82134bec5779a51a9efe837d343390a4a91d0bbfcd89a387870387579ff03b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whole_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e130a886d76b57e18dc48c29e6cc63d724a8e83638ec3bb69aa54f8b8ccd397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18f15d82488c2b966fa2533a77767f3242f30514df09c79ce2237524ce2e96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87472da0aadf1ed8da8d96763ae8219a3a0f8029a6b85a2b107c5808c3c36fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a327a23bcda43f5169ad8ee36c0df2907122929cb23ea65dd149410fd27eb32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kembang46-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2013dddc0e0bdc6b686a84d84a974fa6a7df4e4793dc9f99732031cc637844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-telurtahu59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853cb26ae73cb806a9861568cf126571f0ec92fc5f482652b472758250f43b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-jamblang38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7525244d167508340f11562f761d1a450673121da74ed73989bab6639a5bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44f0b1d7b5621d6f2569b546f8739a7c8568d0fe39cb89683803c7e39d3d635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-toge22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9d6ad8184a97d0aab81de49badaa41bb8e5d6a30e8658aa43eed57b3180f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-rangi59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76069a016d10ca4fd19d67719f8fb9468896f960f3af956d539b3b4a0b7af129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-nasi43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7755617be0b8abe5a232968b494becf4a519584f21817f75e7817deb97b56004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kacang76-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca3fe9bc921097cd5306c63380dc0444711809a6a0b8fda4fc61a9a8af397fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-kacang92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9af9a296e4d4a2d0715db4b3ccf8132f75dffb3b48302eba98f69ea77b05b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-getas69-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b88d79e671609a84356a7c42d90fc7ef248d46a06269a7ec318cdf0e8f72342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-tahu55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8080c3cbe60d6264490d68c14b4b1562b8c525ffbc54fe6b9530661e4362ea37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tapai29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084abc966edfdf9c4419348a4dfd74147ee17eef54ef714e66a64d9b26d74d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...