MAL-2025-92920 Malicious code in zaki-sambel60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd83bc343d2411030fef4aa8935e7070db31ea8d5e5c5a3d26664faa5053cffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88931 Malicious code in nurul-rawon47-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fd63304d0b25e727662c7f73a4af2fbc1d66e2e80e6b3ab9d37daa6b3ef45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91496 Malicious code in umi-tahu2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6265d8879c978cace7065341d13f6ad4ed8718d60b0cff909b557159a6d556d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89644 Malicious code in putri-bubursumsum89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca7828a17153287c46dc62717d1cd9224ed41cec66912976c805161c1054861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91986 Malicious code in voluntary_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc7f776f8846555a423c3f04d9e443d1cd9861125d7cfa73e91a50d01b04f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87809 Malicious code in lina-gulai23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d5a21817bffddacb891dc3911cda1f8e230be0bdc174febb0a17ca6c7321a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87652 Malicious code in labour_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3df835bb7a0e2a32d2385dc35e8af45cc01ef0cf33e9ce3d7b623f99772b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89535 Malicious code in protective_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1514c651e351f027f7a72c63ab3065f669fa0f30b80da27b1a5c5d8896a735b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82961 Malicious code in ade-soto16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cece37a04a3ce622a068d0cf08a067400bb230aff871ade0ae04a7eca1cfb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a372825b427d24311dba6c4259b081580446b2f8495ce4d30c024929f552df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rangi36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3fd31406fd1e6a3d41eb65c649107d16f8abaf6375cead11749f015c4c1a8ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-soto27-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d0faec24494ad3614b71f1076185d48cb03a00e4fe94b03a5b57d142821e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-semur28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ac44b9a971284b3724de5aec96226c55eefd33cd8d5877281d9fd027594058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2d353ce5d34c20beb5d1b6d05462a534694c8e5cf159aecfafa98b4d099b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-miebogor68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b16196c2054a63ba5dc6c702c20e1a85bc2de0f88644be3ac0769bf74d5d39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grieving_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed62e65c30b7aa4138adef3dff815187b2326ef5eb194a174ac77689c4353e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69fca78dd8a9498b4bcf3b5754445dd7995a6d5525a1727c9bf8b2bd898b2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-teh29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8c5b6dd46c8e17a2405210c03ca4fcf2f93c4c0e7952cdf59272ac6c69991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-mendoan27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c016931f2455ddcd2ff6d753dd5b4f594862f3f4cfdbd335c5bb0aa20947ba4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-menjes40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d2c925d399c356347edf41ea5309fedfa24955b44384a09dbba7fcbe9ef932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...