MAL-2025-110972 Malicious code in wittering_mongoose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efaf9da09dc3ff060b87c6f8347b4a9c480272a02521713dce37954cfd6176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107835 Malicious code in related_crocodile_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a978e4f308265813e88582f59677ab306565780f3af676d34537234ccfbf42da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101151 Malicious code in curious_pinniped_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0a7ac126f3fa3e049f5b1814d347b0b295b3d75d9e92e2b1899d0496761a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104267 Malicious code in insufficient_crawdad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3b9e3a26fb5aa645909ae9057c12181ea822e57cc0cda6f0a12ddcbe3abc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e164894e903d99d9c50830cf30653d29ec0f82bf377042bebf9cd0227dc607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-sasag88-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf964eec2486cc1d723f7a98166b0df3eb0c933b25faa1134ba93cdb74d53217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gepuk86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0307a2de784b84753e6d6c2ea422d60d870d90a6401d7ce74aed4056e1ae0e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2581b845148c7308dfa2b8f04de61f98a7976e2f12e53c5e03e2f4b89e2a41e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-moci13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2264b05ceed16714194ec8b3000d29980bb9a369fd5358c3d5e2c0b32cbdb209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-soto82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a2f5ac1f7470be3ac87e10566b75415cd69604d5ea81720040c0c8a6debfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mieaceh93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d40770311edba5c22e181ce41145597060a5523302342c3ea6e0917734b278a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kue71-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f830264aedf6a03c3364e0c9a0a5d5ee7fae0fc6d7f5bd9637a816e21976f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-oblok50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82061a5f5617cf2c6b2232dc6dff409afe9340b236243e9e91daf208a42abf6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-bubursumsum60-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7758c9d27f84d815d985d49322331bfe042f97e9cc085ecb997ee629df887e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lengko81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a55a9a51fe176ac242aab9d97c80f7569931cdd0ff0ca95f2a862b48521fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-getas8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e4b0949c836dc8caa56750642baaeb26e9d82b3cf56c1c4a51d20f8e1a9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-empal18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc7da47c537ff5474f7c6b8abd8bf0161ee90ca499bf055ec0393759fd6ade3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kue100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2830938b180bb0e2dd73724dbcf64dac3b3e10b7dbdbd828dcfbf743c901d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-tongseng49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b021407013eea3afcc2df95d2df432f7a534b5ec94d1da95389f9e765fcb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-miemee15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b691df68722a2eddddc3482c9f8513c87853b804ed872a26aa773f9df4f742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...