MAL-2025-110113 Malicious code in unhappy_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607b02697e912e9c505ccbf8a4a52fae0a34db76951fac32c6eba24947e99023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99900 Malicious code in bella-lapis34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89772dfe1bec17250f2f688f0492455050ae44d288c4c6ca494a76c738fa487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104940 Malicious code in kurniawan-kupat4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b18fee7f25805b17698c981f27369e56d86de7d0d120308b0af843c957afe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103893 Malicious code in ida-kue91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7fd20de2c71a3f9485705c4c9e98385bc28f9814e8950293e0253949382e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106985 Malicious code in patria-tiwul58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fea12b926b94001c2f01061d40b4a456e99694ea5ac5d69ab30dd164a55a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-lupis96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52ea7c1deb5ef47900a1743d0a56d467dbe763ff241dec43c7d807d98418fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-lumpur51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3b56bcec607e60fdd1ca2ad94c2923ccd1ffa2a5305125a5c6e5364cc4fd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-taiwan35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faa4f275f05072e01208d239084a928a06fb1909970da3675ee26a0402d3a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-nasi89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59fefa3560e31ce72df0bc394eae40eda45a96861512ecc9e00f735392f7fdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-serabi90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 530e59b1da5207d823d52775d893c060af1b1b2ff263e8e5f876def7ad192fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-nasisayur2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a806deb63a808da6e9d5d8d14bfcbc43bcd2c2eb1d8a515c3c269004be1a74b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-sambel75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57422f5d0f429eb7e3c6d46321d353bdbcae549c930a6d23b8e1b0c7eade1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ae753450be27a72ab823fcb4d91df18b3aa0519fb72babf895c545814ed409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b916b2482ea1885983f72d5ef90eef4e2219b100151f8507d7a6a169094f87ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-miebogor76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d79f26bf70db5d342f4f453a6811e913a79e17e8f46f50f3fc376c8ce6c887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-jengkol64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7269e33a008615bb2f6a4f30f18a6ad5edf68a057c14327b3cfdd88034f0c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-bakwan46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ca6b13e71f6f79785aa187f14f69334f570e83933cc9386cca43daf3be3cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31590f730ab78c7bbf01eb14a12c3522b7a0bd6802b1bd4dcb1d4063b2a1cf02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-gorengan38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f740b1bf8deccbb95040f7dc7608c39650ab13e62ddfedf7f60a26b78d6e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-lepet1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4ee5388876b77fc5fc8c38620029f46e01aac69f865884f4a8c16d85ba511e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...