MAL-2025-97788 Malicious code in fajar-kue18-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea46321bc06f6d023b8a7b296fbce46d2144f2cf7b059237341254116a3ae17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-klentik88-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd37abbd3e4a8da8027d7201ffd08dc2ab4e32cdb615b7337812fc375a7f3436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lapis21-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b86b59ec3a74dd218a3b0df06cf2c71fd509aa560b4c0ec579bc954c2333425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97783 Malicious code in fadhil-saguer19-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb394ed7ffca375c844a75a0e18b01fa6c3d66bccb1afce05c2c7042099aacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789b8727cc2e26f94c5d8f52c378da42726f969e8c7c697fe4ec4cfbb0037b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a18712093d9514b3c716ed0461486b21868efa02e5dc927883c1ae79ff14aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23ad595ddf7d41266d23b3c3919118aee6fdc19543aa8d24baec32da8fa5354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_flamingo_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a072822ce3789f36545d7b44e654b4e9bc8b4ed121b5f3ce73dd3cda1476f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df9cc3170a047f2ad091ee0c335bc36c49483ea9f40366e943ae3b172517c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spontaneous_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f65e6504eb50c6139f9cb33e57f716677c78848f4ae519e558b519af531e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b09d9d59b8a7da5638db82ba341579f7a64f3dd468d5e590735d678cd87ee66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f430091d57fcb8fcde84d287ddd6a396afe3e77c7894ab39e63e7154dbb16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96397 Malicious code in romantic_bug_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e62fc5eb8c14a5b2032b21daaf20860d0090652eab8ff6af38fa74bf2c71a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95244 Malicious code in liable_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1db54eb4dab9040414962e67102650df730fd052ed09fba17211f6b7069ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94650 Malicious code in gastric_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df89bc4bf65a3dcec57828d22fecd220a9b1de5536d8321fe78a87eb1b3e1579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95928 Malicious code in political-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81a481abc814fa3f74267dad6118b64bc439128a79d08ead322c9532a3ebc87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94004 Malicious code in determined_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d103e365596d03977e27d95e60dc4f4638f1dfcbc927ff1252237caf74e55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d0f1e8f1b7b4e5afa092bf53018a2e4da06118a22811aa7c493199557c8b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15597f2da938faf027b9a9f4343c8b0707b14c33be550ac9c89b341cd36fce0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c300da40cf00c7a2c833babff019f503bc64099184dfb4dc768fde1db09ee625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...