MAL-2025-104289 Malicious code in integrated_possum-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1eeddae19c82e1ab973cb9b2803ba18922796b7bc00229f31dccc68dac84fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prickly_viper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fb7ac361344393ec9772b148c3d262bb0f79dfaf3f2a0da6f29cc563d20c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103360 Malicious code in greasy_anaconda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23be2b7a076f151fb0447c5b170d1cee9c525feaf205166d7162a7846377c36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104875 Malicious code in kresna-miemee15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0700bad4eae6963fa4f574ccd7ef6ec790f951c20c49391fbd1ff66ffcd69634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108240 Malicious code in rude_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f30d0bc577247f497f213e30799d0f2d47be64ba9a1310ea00448bb70e856f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4e56aa63b1d85011761b30fea3a6ad2e1ee7b37dc3de9cb87bf6968d174b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98686 Malicious code in dominant_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff778c62daaf1fca293309da661963b62d44d3974f05906fcfbb46a8d83bbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-soto9-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 092aac4301ef1f715190cd4cba0050585464966f140e087580b5660c3a286566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae576b90d63a7a62a074899c55ec8e130c6ab8743ef5ca4eef839f462ab58107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85263 Malicious code in estimated_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79b54c663e445cadae4d67fe04ca320bd2511d27cf639860488b5758912e48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89744 Malicious code in putri-otak-otak77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b09d9ef58ff5205c0c8e489bf454929fb8983a0bdcf9b91b6557321a7b868f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-semur11-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff2c5cde693408434c078a0bc4fc9deb512f5a8e0085a35e9c02d46d2244a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-moci73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff12487dde39c7e29df8983c123feed13a8375bb2954fc96a2eac9bdfcf6129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicchorus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8460f6b43d86f03464e625947ba79aff3a81809b3372cf750f8ff3cdb833c58e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-bakwan74-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b98137eb1e599bc6f3840a9c20ecd9eb93ccf5e9ee5724d36ee3484873e164c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-pecel6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047452acb56e03ac73d09b11818347fe0a4ed79771b98cd69aa9f6f5399553ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-rawon85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08b14f526c9282940ed4dccc96d4f54a4393c7feeb3026c528b6c93fc88615e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-telur2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01d3a46d0badbcf5e427f6c32fc48e37527e5c0815b2405dbd9cdcc36efeb36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-taiwan17-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b43d4040fc9c5f212969c9bc61ba3a9a58313e588d7dab1affb5b297ef9537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49823 Malicious code in bambang-keripik64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e189786ee40173ba1b72ab8f8c67c9afc2ce7e10eff3074c65f6b95ea2dbcbeb The package bambang-keripik64-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...