MAL-2025-98277 Malicious code in putri-saguer98-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caaa4bb2280a5613718bc3335293e7037277e04275f36ce3b83e83e6d59ccb76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gecko_plum-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316cbb7824adab770fdb456c9baee5255a9fb464e488f46d193e340b2e492054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98035 Malicious code in kurniawan-miebogor89-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caca26420b9224da8457e5401edef0615885bee46c6745317723683bdf17f483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e48658a33ba3c46ad4f8e817b5f923b73a983c1c2197910fc9a1edb3f2eef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae576b90d63a7a62a074899c55ec8e130c6ab8743ef5ca4eef839f462ab58107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aff99b8a8c4d1097d15cd2eef0250525ccd686ff0f867dd47f75f188646c958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eef1a80e09b767577c0fb8f51e4faf5c5130e0a43239f54701ac023977658ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open_sole_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317824e9651e7ae441930c394d141c010c18bb09f2e1a275765946c2f7b2e849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet_nightingale_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bcab900cdba70bf496f2a94471f150672bf38a32c80339daddb283710c5b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12f1150ecaa28382ba9dc5fcf354c4dd5dd2de8db7203569dbd7e0b5f76b4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_beetle_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961151b26ce5e8a098fbeeab3fc734a902c92363714c238d5e9ca6534fc8eb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75afb5dad8360dffc0a7084059a768c71fcf8be109c64fe33e808542394f0f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a855486da7d113a33d704e0d7bbf1bd3926a55d78a8de9b058d00ecf3cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ca47d39f2136fbbe4db4cd23f84c5e0a9d2f7d64651a8e5e532e01133b8593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcfaa25ee202bcf9cf0fcb3fb67dd2ba966ca6b03634d1b2cbf77554d8001a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ce53bd54d41d055c5602420ef01bac978f0d5bcb0cdcde41c4ea81e55ba594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc6fbaab9a9c1388e4e9efc21473f9a75d9ac1aa7f6343905f380759f95418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96912 Malicious code in swift_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51113d9f51f963a5a3ede989455fc6d6a64721cd73af780ca7876cc0beed7922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94406 Malicious code in extra_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356ef4963064b2065827642c7747e0f8328c7f6e257125760bf092cbe345179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96679 Malicious code in sound_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915a2013b3b37e0f7be997bf57a533848311a087d4d83930c76fdce17cbb0a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...