MAL-2025-139148 Malicious code in near_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae380128e7d87d2b82ad55d13198e6560306659f85226e358b62b95cecfbad44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138844 Malicious code in lonely-emerald-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0039326b84e9139cfc3d916c40bf11f3e476dbfed30beddb7239571752ab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in t4mp0p0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8533adbdab71fb930973ad0a4455ce8ab1c0bcaca1c83b958ededb1a3286bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9ebd375013a5644129963b13bbfe677aa152d42050d992c415721dd6c83886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-blush-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cc555f8cf4468a685484aef73571c94a18537eb2873f52557eee485c1a5907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-amaranth-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d270e11ef4012653ee53b617b958f166f6f81cdfd07cefaff96c7145bbb5886c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139069 Malicious code in testy-bronze-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793f2fe61ea3c591302a374c9a184d306c5592978faa341fdbc3b5f43744ace3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138865 Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-lutis67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1363b392447c5c883eb0ddf3d86a81b3a3ec81df09731f01b49983ac94f59905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-gudeg92-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61195cb323575d46171dce5415fc0977fad1df7a43f0ed1e6cbbc4598db28e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-kue81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29634de0959135c18163e5f976f7d48c51024ad67c8c6d67b3c0d5b7460f51b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-enting11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5272c0db9dfec34e76a60d2ef053a7c7274db3144baf2efac9862c51953c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-wajit80-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078a17f5743383bd42e4f9de5f06037473449b8db3b5a30dbe1f489c24126d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tek2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42154fd4da8ad75a0b3643dcac643e50c69a54e482da49b267e53f5964a9c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combined_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac79265d5dcfbc672bb33bb0d094ee78666047fcde73345a2d59af0a17173f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ec243bd2b7927a25f38e8ca44a8d974f6e8a900df1f5cefe8f80ffc884462e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservation_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb5cd7cc7f0c7f8111cb9e0c6fce328d54505fd7330d2428e045f2457c08d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-ubi45-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a89a5a496d1105a32a629d8171b1770e8d1509ab2636a1d2c55a073bc042de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lodeh77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54fab596e1daa9acb41d8cfa46b6fe8a03b607e13a56ae937634c8b6b77fb6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...