MAL-2025-70743 Malicious code in sparkling-apricot-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2731b94183927d512826bf9de6b1d897a9b1dc88db0c252ae7123294f0c1905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kue65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8165ae0163b1b5bf2cec8df5ffa5fcc1e890300a38451565f5855372c7aa426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-soto8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d8038f4210e458e15d5904b0b0984d42ef145cf77e29b99ac0fabff0f31307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kemplang17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c17b39f931c7b05cf993a34bd815c4f5a341780368616c6c023a602ba71c1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62642 Malicious code in eager_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbf23b854ae5673eb1fbe4e129162c2dc2d803460f4a4ec35baecd7a90cc9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64904 Malicious code in putri-kue92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f85709cccdcaafabc6ff6c3ad16ec639473fda6f2fc18bfd32eb57ebd3a4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b725f2d5df8a69d01b924d884ffed0403001b29a385cf7baa085a90b49675e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61242 Malicious code in scientific_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c2fb2be8421d3a2efe974c826275e0bebc6ba12585bcf6b4b34a7d09c844f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5999938441dbef772580b981e3b3ed25d60391056761dd3a818ad360ea23bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2af21cb49e87d6e85870f34baa951d984e57ecbd97151ae2b50a0e62f93f22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8124031dd6141f0b6ac9c8a09460a0cee73d784c5573f2c82247a03b5e616079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61117 Malicious code in quaint_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14afeb86c649b2e8eecf640010f227fbad5cbe4e52c8a5f89560cded111d8d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-telurtahu39-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac25ac564765a8af154961eb9740548588dd21ac01d5c61597371a242cc224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58364 Malicious code in religious_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4236af8d0537b09fbac94a99b2c1984afda0f71b35f8cdfa72d459019c642325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-keripik65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d11308640d3348823e64c31a21e469c4bc7f52e178c3f5ad3d6487c6ecea7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-bubursumsum90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e03175e60525a3e9dfd22f64aae8ef55111fd3701be2de30d8d783016f62289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd85be948e4c231cf25fd3afc63c53d9b4f5693f4b57d387b8c967a13a0f8a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58344 Malicious code in raspy_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e0719477f9c7c34b9429aeed1cb8cad6b9d078597886750467430bc811e6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59841 Malicious code in zonal_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053a7344c0cb092a8c47e6e3fa22302542c8ea7d9f9948a01f2de70bd472613b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55284 Malicious code in bambang-gandul99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c8f82558b68b727aa11fa35d781608fd299a3e77ff9c901c349a0693cca10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...