MAL-2025-108560 Malicious code in serious_locust_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ac991e4fa48f9de1a538ec27a403ccd493a21859ecfaa8e87cdee7ff15d1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101849 Malicious code in early_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d639fb680151cc8ae85049461b8e5ddbffd8a0c8db3f58b0d1a0aa21f8fd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99516 Malicious code in apparent_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bb6aa1b479c7a33f1d2a6dbb6cc844fb78564c677feddac399717253d2cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111266 Malicious code in yearling_mule_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab35836c4da394d09c77bdf4320ce66ec1db6e074950a6440e2821a736872047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106780 Malicious code in organic_iguana_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b094f47b7d450f6c185db51c6326f1246583d3edfb32d147d67f0809dd4b24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99885 Malicious code in bell-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77d51ae6f947daa28bce00ef20954bbd1a0194e0fcd31103947327c56e5dede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tempe75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39a54fc0b20b1c433c590c29c0fbc761c7d0ea2b1752d72a00b1ec85723551c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gado-gado13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a5af3a652fe66f2cf30d46e56acf616b178ee4d5c4fb6b352500a1baeab7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-jamblang38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f14906027b90822d05f99b109647c8d3045e7b4d3c73bac0d78d37c377a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-tahu14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d960f84f90b7e91f35fb3264e851341d522f89a83e3eb0b08eb6eead26197d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d070e3e2eca7e267b00ca65cbccdac1260d84648106d8fcf8a106fbdae10c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa89f142b637c61afd327eabedc3ec3e71c714038f16fe3b809e5bb05ead7f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-nasipecel40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085e7e45bd6e254b1e7b90231eb66e537a48d72067a066a93b1ae77ae45a74cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-ruwet23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0f4074c66f00d49109fe593f18e9dc013b0e3cbaea7f8c249537e528f0bc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-klanting35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3137e620daa8555b2f60ab0e9bc21a5388371676ddc0aac565a8095a9d0ef354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-mieayam84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34477d6febe9fc4d91f5a7c044ddeaaa4f80b0ad4b52b4a42f4029b9c750d483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-brongkos66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1ac1024f6df5de9161957260bb8a7736af1fa59726b6bf176fbab1676a210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-gepuk14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36aacc8f9c71de90a168657d932381e6a32e132fb021ce839cf30864c01e532b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-telurtahu100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6b54ca3e73c55f512360afdd9b9a04290520fc3c6d425e5a615f9cd883e850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kentang24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e465eb8476b0cd577090f0c9ad43f7dfb14029fc6a61c20becfe235f1e2b422f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...