MAL-2025-119371 Malicious code in depressed_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131183831aeb5e3a3f256422bc62f2f8ed8a54c53200aad63b982020b643335a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118695 Malicious code in andi-getas19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b763832423f33d6377322b12d0eda60f9af51a722d155ca635be34acd0f3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb53c195c65fad904345dc0bbe7167e6040eda738d7b08c3aa7e334541a530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-jus19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d4005e63dc12a31d846050b61fdbc8479ca6e61755ee3bae1d9d0eb0f81d002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tahu32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d1c79cb5730529563a4fb4ea021d463a5f064cfbfc050e6fa7bbca45e18a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-gado-gado51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99947dc967a9cdde5a530351cfe785b7f169a117a92587bab7a10bc194a19e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-getas81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b952aa0da868dbbf4bf3cbef218ad01bb6384d195b378ef9f57f392de75a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-naget12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35e89b984d92a5b6ee829802ae4f8cf0d631eb19187aacade6ff436bce3367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-enting70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0137e58954cf48710f26beb2ef10513f0d9c22f5e2eabac5b0f389618936cac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-gado-gado18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d94b337a4e7880ec3434a2e227f3f3249aca0022efcbd38a1feea44eaa2f6ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weird_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63703c75df88ce24208578f961e5d14a4d6e7becaa487f0ac868b42f7e7d067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-bika24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894da99c3b538a8ca518f608e5094f12fa2423bf6516d20609b9f7328f3e135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114361 Malicious code in good_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8034761b048d9586dae76032a9fd506872ea13b72fd7289b831b1a021fb746e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116155 Malicious code in ocha-rangi48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa070efd3d7d84baeeed07af88e40bce370180e58399f2b3a5343aeb0f2d508a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117240 Malicious code in subtle_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b339f301146c158d3c7a147a8085d964d6b3765ba95cf3065e416a2a899f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-ronde2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a653ab46fd4d4d7330a33db451ced1b1031aa55d60d457ae18abfdd4941964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4573148e90fcf944656c0647b9bdc00624205f190027d3bd1dafcbfcc50e91c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sroto68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c631ee35a961dd24bf5737d0c88cbd0f260459e613c59b5bc5ed2201818b4ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sasag58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7c943cdc51c1a9a8e945b4810c743fc179b57ff0f2511f941aa661f562d1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5a3287d5fb30a229e0b0ee70110fb328f3b3965dab9bf5065805bfaee3b5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...