MAL-2025-111261 Malicious code in yearling_cheetah_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e45ef7ca6fecc27d085f4f8cc43fdd2b3751afcfbd325fdf4ec6b1b5626ebd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident_gopher_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed931cae7fd659b7b3bf8e29cf14c79208b0877bb88b192f81dee4e6e41c5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99259 Malicious code in agreeable_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdca95017de572b97689b1f25237b2964c812a007cde1515521ca7175df5bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102430 Malicious code in extra_hamster_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468ae07c47504cd0dec9ed3474aa76398a52807dd764d12e69f70174eecd1a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99192 Malicious code in administrative_cuckoo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb0515285480f49be4fdd84ee99c13dd7b411d541e9a2067e256e72f6a88e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc3bd504cfaedfb3777706eef40b793827f78ab381c5d8c2eb74a25e8b50540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ragi52-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8775f35122a28d5a15ab8c124f866893fb1f4796fb17aacba171c09a8bdc76ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-nasicampur71-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57e20a9ab7b55243e84e6a3a9d8fb179c2ca6144fa9298842306a84c3e6063f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1473beec6cc0380cad0a3fba0b7697ad32ae8df35be172bdc8271a37ef69473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-bubursumsum14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293773fdd5a81a11c5884a5389bfa4bd67ab5613516661bf163a8f045c73e094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-kembang90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80f4a9d0e3d7b18940ba1f6870a736ad271dec1d14dfc807a53e320910648ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-enting75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae26d2f11f08734cd40197258278fd1a0fe38aa6e89990e8fca90b452bd3506f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-otak-otak20-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61aca855b8cee585c6ec947c53e2017096f43b4a8f0311780f544bd49b3ac6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109389 Malicious code in surya-naget81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5ece4c929c4c64fe6afa48ad591a5883e758345337b939a1fedc8faad456f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whole_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe96d2f880930a1a545f1c2365d5162d0500be9b713858e75528c01d47c5f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101494 Malicious code in dewi-tapai48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734aaa426b30720ca074f2b78ce41c771e01d4de1fd58db18ceeb2911ee3d5cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102200 Malicious code in erwin-enting42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afce4dcb82e5995b80bfc97f4dd1bb626dc4f5caf4d92aa81cc62c28a7939ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99652 Malicious code in atomic_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff4c037b19c91ea57d7206ae39581fff01f3dc833a78fdb6072a512cd9efcb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103880 Malicious code in ida-dodol22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945463c75a588933d6637bfcfcb3aa6fb257f0933820c8218df94ceee603cc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108134 Malicious code in rina-nasiuduk49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ac6facce266d59c57a1be47d6c6df0946d6e103d96421c866922af0e99b1c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...