MAL-2025-69747 Malicious code in organic-aqua-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa80755c65347e3f3aebd4dfce4f345524d0fc3943a7f3cba10bf135c12d881e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67708 Malicious code in delightful-aquamarine-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8263d2c6e48ea165f9c77064c420b44ec852bf66784508d06430f94345b5ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66589 Malicious code in abstract-emerald-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0a510856680ad4840f3d23b0dfcc1720919be5bbb1043cd0297b85954fe7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-kue69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb340c6c64e07fcef33cc2d0435ac9ba13c5a44f955185eea2aba88c6120256b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-miemee95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2701e67605c770a7317aacdc08e3869f36b3a9e6dd5dfb138e2dbf5f486877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63848 Malicious code in kresna-lontong42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418ee9ce86265f8e2c02c54d8685bb602513d788972ae4038610f4c0c25bf227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-rangginang98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12fba5912d7ea130ac6814bf8b941739f78303ad0972d7463efcc86975be60fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6c9203ddf3750477391d38e1b57b9977f445f916253fdda1730913ea9c6cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-nasicampur45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aeeccc20efcd184c98ed5e27185f13bee2ea2ef6f6e40db69542e562a39b12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kentang40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148b7e143cb44c0ea94bcb7ddee943f1b0e0ab0a3559a00727d2be353eb2a5d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65505 Malicious code in symbolic_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263c7a3867da045df9093a38e479bf5ed13f501ada21651d3423afc2ba513abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evident_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9497c3cf226c4b60feba6d6d3e31bceda81c5716560ef50f226a9bf005e94997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61096 Malicious code in proposed_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e597134b96022c4dd3637e47c0655e6c45e3c87e10751a43b0f4125cb6986d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f9284ec954fad09904cd816d52bd067e32dd0188411a137d4ffef0cf2b5ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2549f04af155dbc809ca5c6033631745812670f6d6796daf541501a595090ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in causal_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7004327ce5ad26e79d044efb29e71900466cfc1f3c45da70a3c592f295903de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61185 Malicious code in residential_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc2de946cb88c09dd5704750fe568f7ed47b98ca9888de89a69188cdd146e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60666 Malicious code in incredible_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2cd36f9c953e9e1a0e8f84a0487ad0e96b22b63b04d091c291e9f72bb8b21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-telurtahu89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a7fcca2ff02d1712c9f86ec76e28a3b52a21ab98435a0ae1cdc1430e66b98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-kue16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42360ea7214c3e822dc1d00618603488e29a3a234fdb5e9e7259e0ae05536f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...