MAL-2025-66764 Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mute-amethyst-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88248a1b47a2412a421a35bdc44c80f6ee85d36bf38dc14f51c3b737f9d3a85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious-blush-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500e28555e08d0863bd54b518c30dfebf4bcd17006a026a1109fa804335116d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70773 Malicious code in spiritual-lime-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c1a7bc12603a05eae6f51d99170667a8b6aea2a48bdc34820f60bc2e03f1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69906 Malicious code in plastic-tomato-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ceb41358fc5f7351f382c2dee5db741e215234e0792a11f90a5e4e1c7ff3d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-mendoan51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1add8b35227938204bdba8da1d1d0fca6e4c8b22294330a0f4832cbe1fdfbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62359 Malicious code in clean_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f3b24034757684da10d3c6447687dd5c9ddffb8c44be3b12ca28c6fc4bda21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62779 Malicious code in erick-rangginang8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3f02e3718b4394260efece37792ca6623ed9196f555539a348b55d1dd97572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61567 Malicious code in varied_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e32a8bf536316e295e9789d024cb197e67f4449db3c5afdee2a7b5c5ffd186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d863f968dc886cc9fd45a57b58a891b798afc81007213802aee677fa46caefad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-bubur45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8331189202db9fbef46e2b36745f69323961216c9b98ad86292f001a83d5d8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-nasisayur55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0db217796a775b76b93f1563496c3d37bf0aed6511b845993eaff5d5542895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-ikan66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bf017402ca51465c6c7501a34c320a5c0f5cbcf2c55490ae0cc54afc0df77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56008 Malicious code in eko-brongkos9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9b261d8b41e143f92b0cc8c229b8f4803aecf78d20e9a58e87f0a3e6d7e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53489 Malicious code in nina-empal96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c092680e9204f30f97eeec5d6dc1102d297eb9dc874ba02aa5a950a7b2f0e2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52321 Malicious code in nurul-ronde63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ffe78b2dd053bac958e9949736f7ae773b8c477ea41f3c0246cb506e0248c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-rangi7-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e902ef2b217c03538f535439662b525ce38e799a1a405d0640da9439c2b6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kue71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feccaadcae43f72e29e46f06b7e73e6d6cc89712361d7bf4b316bc8e8ae6a31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-gembus14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1f1769112a2911f590bcbb57100b3a19e588c7be859f682fe8c758b3f93e52 The package tuti-gembus14-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in citra-serabi90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e8e694e3362009f995a59b8e9b845534241182b3db1acc9c2cbc1b2366591e The package citra-serabi90-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...