MAL-2025-104391 Malicious code in irma-ikan1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0c7bb25e758713d55790a4a3529e7684fc5767ecfc00d85ed33ee36bf732a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102478 Malicious code in fadhil-lapis56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5a865906e480c0ac9ec60fe005855ce91c5db661f177d8c8afb01541ce774e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a53588c5b6caa04d68431b3f19b3fe377004c702e6645994e8f859d9f646c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110006 Malicious code in umi-tomat78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8491bb44ada77b584f3f06ac4503627a283937725a2bc3949d2c018f2c9cfdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100367 Malicious code in cheerful_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55de0e053ab54009fd58b0dc94eac9376b2d9f600b774accbd2ac88fdd0a79c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-keripik26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13d586e6aff1cfd494c6f780431a1b75be3a0f2beece8d67ebd34174a4162b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-sego97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4af8d7da7333865f1eb9ea19b30a6e9a98b0e47647e2d4c8a21a9e92a7d5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4a8772685cd72c9e749b9bcd5cd7571af1c261325bb7f935d331fb8711c68e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98545 Malicious code in yanti-semur33-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b84f8f2c288d06cbd0ab995956f7f8201d312867181c6ea33b54b6d042a2d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-semur33-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b84f8f2c288d06cbd0ab995956f7f8201d312867181c6ea33b54b6d042a2d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94231 Malicious code in embarrassing_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62c0fcfa68876a1fe99ceb8dbe40e75487fb55b223ee152b85cc7cae8853be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prickly_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581b0648c21cf8e389d1de1481cfe318965cae2fd9e5a07b536a552f5eeec979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96586 Malicious code in silent_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336c0b3754fb6bcdaa6979469ae8f01a6f44d998db28d9d1f297b26ed9f4f238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4192742af305e778352ee8d6961903326e417b8bdcbb473bf2c0c3c713066b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94805 Malicious code in heavy_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782cb500ac85f6335a49262a7be839b39424a4f5feec36dda9958cf295b80f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b812b585e7e08797ab7a13f04a9c0f055e8cbae4e1aa843f0905d184e431511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96110 Malicious code in pulseforgeasdehp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401d492e7b233a0bae26a7f39c31f63851acb89171d5543d5ca752c9a7d35dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96245 Malicious code in registered_marsupial_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556ffee398698a8c3ee9a8c2b61d3387878167ab0eb812407d4e1b08babe826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4988b88d1e42edcc086b379a4412a1576efe5803b01b9a138c2bb27f6a179db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89385 Malicious code in patria-getuk67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8a933633b7b9aef031f139369c6e4e1a7bfa60229da2ca11e7cd11b2ee8f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...