MAL-2025-104244 Malicious code in inquisitive_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0acb3639f9672071fa034786578786e7ef20bc5e3533ee5caa4cf706f7b8310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101151 Malicious code in curious_pinniped_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0a7ac126f3fa3e049f5b1814d347b0b295b3d75d9e92e2b1899d0496761a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107964 Malicious code in respective_squirrel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5e6f9263e233bfecf91e8d3131a2e8aeee15dde49e49e7b540c8e02bec6b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102885 Malicious code in forward_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4ee825fc5abad989337d844b8b5925ff4ca577efae35f3f11d5f8ee039b7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-tongseng49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b021407013eea3afcc2df95d2df432f7a534b5ec94d1da95389f9e765fcb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e3cd5840dc138a66fe05037dfbbce0ac8219a5f3cc07b8c6dbc99fdf9691f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-dradag65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f5e87ee759a75b30acea7d05b8c1b68d76cc60acbffe98c098b6a5102e4964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-keraktelor46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6c8aba542e9a7fcb9a43bc37e7d2a05b2394c7ca2b87321eb026b28fba1a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tongseng65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5ac298e3fded02fcff8961bde90feb6920339a98ca548489746dfb0d4471b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7833d88963cbf60a6c8b1f44fa3735cc06bdfbe96890c4a9173218177c635109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-empal18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc7da47c537ff5474f7c6b8abd8bf0161ee90ca499bf055ec0393759fd6ade3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc203d2240301105054d21f9fed7ba7f10695ce6ffa77b239c065ccf3295d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-ongol-ongol4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37115bbc1bf3513ba10b326286639e35626d80408eb9d529264538e745f43130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mieaceh93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d40770311edba5c22e181ce41145597060a5523302342c3ea6e0917734b278a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gepuk86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0307a2de784b84753e6d6c2ea422d60d870d90a6401d7ce74aed4056e1ae0e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-soto82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a2f5ac1f7470be3ac87e10566b75415cd69604d5ea81720040c0c8a6debfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-miemee15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b691df68722a2eddddc3482c9f8513c87853b804ed872a26aa773f9df4f742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-bubursumsum60-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7758c9d27f84d815d985d49322331bfe042f97e9cc085ecb997ee629df887e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-sasag88-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf964eec2486cc1d723f7a98166b0df3eb0c933b25faa1134ba93cdb74d53217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lodeh65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42391fa5e6ac44865710b6e669c9ba480fd0e6f8c82de337254e2a980b351bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...