MAL-2025-98035 Malicious code in kurniawan-miebogor89-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caca26420b9224da8457e5401edef0615885bee46c6745317723683bdf17f483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sailfish_purple-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c2571765fd8bf4af838529fe52bb1d5f63c0683f41cac49990c1a7b538e79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-tomat7-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bac616688224c2ca944f6dfe8f7cfaa39fcc475c10a238c0ccdfbc130f6ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2273bf2e91376dcd49464dc7b5376adaed0f3b105eeaf2af7871824d520a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anonymous_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abfb87f2a967ecea3774c272f7064f0639988978eb88a4ed78f9c240168119e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29ca00231746ec55bd66d87f9bd70639aa4c0ff2c20fa2efb6f1a8309a3331a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28cab4846fc4bd32f8f9f855b8aca5db272bb09795e38a810cfb6006dec53946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civilian_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac06c5ea1ec4b4feb7f836d8b49b169e341bfc622e1214b4c03b900152a2d3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90394deb9e7df1839f221114c981ac81ad456cdb178e728c7fa04bfc8dc88ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b58a142ef5ce0a7b72ea8ce02f45b896c51bf5ac31a6866cea1e2fe1f7ec66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383ec4e824652326cc68ed1b3bb6b18dbcf1cb0af28e884e184e2472cb0f878b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc6fbaab9a9c1388e4e9efc21473f9a75d9ac1aa7f6343905f380759f95418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0019b5e8630a017ef3855df926dc650faef21d2de24a3887469e081d48c3b161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05a40ebd021dfabfcdba81bda105b47d6861b06cce6e43bfd1e29e30a35ca1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605a6b54a634951f0d1db7afad8c9e176846643ab958aea3e4729a6d876fcbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ab53203ec6d9347eefa279812cdc48d4ddf17d4199ec06c96d6b3c41a2e75b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7eefbcfb9878ea4ebe0cda6d5109dcaba90304700445a3fdbc404fd32e15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e48658a33ba3c46ad4f8e817b5f923b73a983c1c2197910fc9a1edb3f2eef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08d6a1fe59492a310fc349bd3343ef4e17921bfa8ec2cef34e3b4cd32d22dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gross_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f71ca4a0511466895c7dd1b07b6252d6e5e5e16cc56faa60e4b596d1adb0c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...