MAL-2025-96403 Malicious code in rotten_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0197185c55bff820de79b9cd861411a56d5ff20d4060619d587719fa60acb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92425 Malicious code in xaver-telurtahu60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc80651d279e2425848e9b1b4c9d3f6e0c4e893563d4de07d3a4cb8b2850a7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90560 Malicious code in sinta-nasi33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135046b5fe2dc8995d664cbf416e132b822d996c03b9f93234fda307dd4e2250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88291 Malicious code in maman-telur44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d14515666a09775df2543f245597a35bb1c316e87ebb05d4c31f5cc6ffcac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d1b712ec9ef1aa78d84e625696da794847e8bfef762731b027d2a437ac903a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-donat33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c94f1e6bdcc0ebaea8f661cca3ae4f6eccfa9e07a03b8ad8911f1ff1ee39b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85381 Malicious code in fadhil-tapai96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57601754c9642ab0cf45d0933e3cfe40fb95840271de63e911714b7fe1b6df73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tahu16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8486b56f69781bd31c72eacc09d4bf407bc43f5cef7182d925215f5b7e1ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-tapai33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1526bd1f20e359df5143b5bff960dd1d1e2209b2bb61fad7db404825cf47507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tahutek41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a323fa1a4d30a9e7d9a4ddacd106d3571b45f719866a6b930c10a19245ddcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80960 Malicious code in resulting_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419f78763f75cf574575fb78f4453f5e76db5c4f34d7c4603f1acd05650c0da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-serabi4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81725c701b79435f5c98199b2238fc5d5237bd2468a59523f4d96246f2794e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-bubur85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c0ae32aa7c5c29ff7a881134c89cec908b88cb9f53f8c9845868e27bd9e04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-sambel30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57de8214e0415fd5696435b117b0254c60485b2d25a9cfe97dde3d335d9e9334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-jus48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d77d15905ce075e5976095494ef0932a370afb3729a7c7eb05aff41f2cef75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-bakso18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d3297ebcc625cf6329053d283f2719a963d0566357ea57419e3aba5c212714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-rujak20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebbebf8a37b78d5b9490430d4cc03388446467b9abe60b502097bfd27fe1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware-chocolate-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672c465ed5a9e604e9c4be3846b0f6307d2e3c7baa26da6560b2d7eb0fe71f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum-cyan-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee89283559647380a1046505f02e277089fab5ff14451803bc856776f9ae676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71613 Malicious code in wonderful-amber-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35801713847ad0db824e716b8ed1d7aa967f502740ba840824ff300da8247927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...