MAL-2025-87979 Malicious code in literary_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede5101d3206354ed662d88382e8653e4fb56dfde422d1e036ae15a5d4c1cc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91439 Malicious code in umi-donat39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5efc673401b510af02202e91a9ac1fee411361550042530a2b8551325fb63a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88581 Malicious code in nadia-gudeg53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4473b0e937411a066bfb15c7e8f09a1fca587eb2b6afb4150aba0e6ffb24dd87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88681 Malicious code in nana-ketan45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f375d6ee37278f033e23e71b9c37660d121991e249a6990570c6aea1964481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83522 Malicious code in bayu-lupis42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d942c1d6571fe1dab79d310d620fcae771894ce6b537abfc69d556551bd2d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89612 Malicious code in putra-taiwan74-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d07a74122f86096c8d8e78c9df2c3c6656c73e1a5c76e054db9fcd4ad42481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-mendut68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6367e00e76ee2a85a4ae2ced7f59d7afd7955ae19e23a63c6d1ee9e3d626d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-bika85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88fc87e71fd36dbbdf1bd6b909b732d7a5e47d8df257f4b616853af56ee6314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15de70ba5ed8cd5f9d6ce2029892ee50fcf5b88645c968549856b876300d0b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kue3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93d1ff90a45129e8da1cd4fc6cab52ef6969908117cc2af64993bb9191d11ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed0ca13ca282d5bec16808536bdbe914d93dd2918bb45747155caaee2fed7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3d04e8742c426a6e21ee3bed97152038322ba3f2194699dd58d76ceea3a46d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-kue41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33a903f42e9abdc7bf162d4704fc2a380a9602687a0180aad07a1c92bfb9c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-soto71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4f8af43376ada5a6a1943ffb33c930388fb9b84bb7bfc7ee2740386badf107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lupis68-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835c0d77511636c71dfd8cd361943815c16b63bc280c46d6c19d39ea3db0d653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-toge69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ab9eabd768327170436a5a5d45dffe5490aebc42c9a155e89317579084bcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80cac0456ad3dd075e7a91eab97388323fde481edd92df5851183ee2884af47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29c63e20cf7a44b47de106ba0d7121e1adb7b95a9f5ceaf86643814368ffaa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f68e58e3d871789bcf8df2c579e9586d76e72e34d7b5a771eb3ef7c36e83288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-bakwan48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8153d601dc0d060f2a63ab02166ce728dba571e7c7b1e28d4a7f6cb890e41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...