MAL-2025-82988 Malicious code in adverse_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03e0fcaeab885be446312f828821e6f1ec10775c051516c71c496d5de9c552e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54faba2d66d09daabd9baab9edcab2d59ac00bebd22b8b77a8e5d9d9dc1ae472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d960217ff17bc235700d0064c7237d676752d97709a4ad8b220ee855f63a5784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84555 Malicious code in dewi-takokak77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f27d3e9b191e558820aa52a037cd968f74522a7598cdf3827a78b7299943202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90776 Malicious code in stupid_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf681e8f5b710a2b39017773658ea3928345eb2ef16bdd501f14c4badd9eaa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-tongseng43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d193f0d30b5c9b307c69077e996b3f0e82d22e76c4d31e50452510ef9dc33d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lontong29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8746de03ebefa9376bafa38e7dba1f2a9a5a396e4de5ae76887b8ed889ac1691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-nasi100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d32af435b0f8e39c5b64d1bc45e6e33d59b7ceb1bc1bdb53429231ecf924d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tumis6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b228b01334776f1a7bd104c06c2046e116f077e206a193a22867256c9e29fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75697 Malicious code in tomi-kepok17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3bac04df93b660495c2eaf2767c58d6bbd9bcafebeb46d26e5bae3e10fc6a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lumpur94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8e33af5734b62708b9adee3d3e42be9e3feeb77edbbfa7354f31ac21dfdd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-moci28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32ee12eef50cd51dc0b77438bbcc03b4ff801178ec4bf8296872783837b2096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young-amethyst-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c94c6c90f985ccdf17c8731cb305dc7a3416e773e78bd21936436d4cf8cf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-peach-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff881229238be37ef4c120ef2e233eef1c6605a68d69c391451d62fe84e1eb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ministerial-pink-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7af89a9e0cb05a95cc862b0b9398ed887f70aec8efa404a03efcaf4e8af50cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net-ivory-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb7c8b0958959a993df54fd248c37aa690f55d4867a5689b8f73eda85c8e99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71472 Malicious code in visual-salmon-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83e18fe4ffa1fecdefc914db542028400a36be1ac3ac3a4a8e1026a552ccd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70415 Malicious code in romantic-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46116023bbb1ed0de03932f05f26a8fc207cf208789f3435fbe88d71b7b7381e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71075 Malicious code in tense-pink-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d21043bd214a99674e2ee428fec309541a8b9e34aaef4ed5b199324c61ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71308 Malicious code in united-maroon-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1280642689393e13dd5981428b4c0b46f7605d9eedc9a9ef26f5847946e9507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...