MAL-2025-90528 Malicious code in sinta-klentik70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b70f4ae7550c9947745c21e31ab8f2a0c5bd43a24dd42b02df97e0a80129bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89317 Malicious code in opposite_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e3646ee897fac79a161557032035f6417985a7886b8fbbf557b2ac64685c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87946 Malicious code in lisa-nasiuduk4-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85bc621f519af14b4ab8f16f3d193e2ad8456676b36112723a3f6d1a04abc50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86816 Malicious code in irma-rangi29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670959244fb3ba6adae5bc37f7514fc3e325fe70382f1d0ee1094bb8a7bf4289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83924 Malicious code in cici-getuk37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da7eea0259533353b4ea9a64615b23098ccfad1e9a3d83369defca4f19904ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-takokak6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11245accefb9987ac55df6f210c197981a4b66cea482ed13278282c782f80360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-esdoger45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a8a6208be0e4d621e92468d04dbdef2aa072b4f239a8158871ebf5cdcde1a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255cfcb5c7b304a375c36715a9a509b3ebd3bc8ab9f5b88242a6466c09535b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54faba2d66d09daabd9baab9edcab2d59ac00bebd22b8b77a8e5d9d9dc1ae472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-oncom84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792cfcfe87179d7188d4ae9ea0bcef25207624c3a02e063b0428061fdaa029ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lapis66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aa9e7a9b6da363b94e9b9807f5165d12e67eecc60b6cdd57d212a640888908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-taiwan64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5cdaed7e8fcdca71f6fcbffa8670629b56df5fb678829b6ab6c39ab391dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-keraktelor23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884feb149329fc7d4d53babce0ef08615a27622cd1c0e05b874e76475d4da473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-kue97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e29e028f6526055b8d0028198c4dd21f2a517cbc93e3eda333f8a0f4029f4e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tek73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5275ba1ce01ca23334c1bd8df012e487788095d025a6a972bf5a0c8e15a418c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31460fe03259c7001a94b09f3edbbc8f87bac8fbf24f09da672eb7012242ba76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-oncom10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce021858008fcba4a77a1337496764b513410aa962193f401165447e1fc95b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f145f3b955ee411cd3de937195a1bf08adac91e5d3db58fbf37a4d32974b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rangi81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b5ba877b56043d681cebc1644c2329261cc43c09fc9c9ed58810fac05f2332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kue16-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e33bd9a194814083e307ea5efb48c4ae85db0af1b2d87fd279b3bbd29f0cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...