MAL-2025-71075 Malicious code in tense-pink-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d21043bd214a99674e2ee428fec309541a8b9e34aaef4ed5b199324c61ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70415 Malicious code in romantic-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46116023bbb1ed0de03932f05f26a8fc207cf208789f3435fbe88d71b7b7381e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-brongkos49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3566e43caeff91b1dc35d632fd1cab5df6ffedc20d0f89f9917f4a6cabec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351e3028fd3037aede696eb398e30004a6cdea17ec3c569f5dfc17f3968ee78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-klentik45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5470017d53473696b1adb637109e249e11b8dd2723e9a065c260acebe17e67a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585f8b48197408bf726e2cb9145bf8300c5f65cfbe542ec86ecabeb5101ce997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-buburayam13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5eeed22407687247e6d5ac20e212f78c1514c51afa463950557daa025a647ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-nasiuduk38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ef24b56972b7a615914f06ba130aa6080287fb0c92958a97c4fa7e76557771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62256 Malicious code in cici-ragi38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8e8f6f075253d728e1afd6131e34d3e0c7f876d42369bfbf92cebd4524a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-esdoger93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f6d6f61bd993ae610e835f76643d2a1b7987d353e4c4b20cb01d8e2a398664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mangut94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50297746a505968086b27450950459fdc216db4bd8c3de4b231f5788d1e8ac82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59164 Malicious code in unpleasant_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd2ba8db29972a45a112f7319ae805d0ea21cb3ca149e5eca4431a9ad386f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54888 Malicious code in sinta-telur87-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b571affc85277228612740cc402efdff5714a399c511bb5f8675ca84982c5f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tiwul26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23e81397b826df6564cecaa0a5328acf290d32f67e0cadbe8e1de3f44ade083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54225 Malicious code in putra-kue85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed29a03022942043905bd56f450aa28a3bd400c8e9963722cff17ba9e5eaa25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53254 Malicious code in lisa-lepet8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1287e9846bc0e69635004e1624e75d66762912ad6bffed6995c4e2cd8a562d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53599 Malicious code in ocha-keripik76-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640b7ab4510e435dabfa75038d8f1589edb101c44089559a4054b5d2666fa4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-ruwet54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff7b24f3eac96c8e1fd059ce59f05493c334edba11c3b9e729a4d751ae31fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53322 Malicious code in maman-lapis43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67f87db9bc385331d9c8218b37bc712f3e0aba6ae8c3b4e6a7628d50dbb73bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...