MAL-2025-107863 Malicious code in relieved_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23590b6483f4adf1b16759bc05fe370b8b4fb97dfa381fc59c5b51e21fcbf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101366 Malicious code in desperate_gecko_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4c75d43654f12adb2772096a426742244fb05e154d2dc3f4971b9280df790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103605 Malicious code in harrington-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0219fc81409653522fa53af1aa3fa5db26f3c16dabbb24331e47daa162eaeea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107905 Malicious code in renewed_wallaby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4956aee5dc68441e6c43533a0b7170136c51b6b7981f3da552d24c6b3945618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105341 Malicious code in lovely_baboon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476811feb5d050961d92826f5576774b8902ab78efe0df9ad6fea4e2b2e4c018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107358 Malicious code in proposed_cattle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e535311097bed5987e3878741b8ad5a623c31ffa8783b3dcdba978cf1889ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105438 Malicious code in mad_dolphin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f3b6ccfa435ec85c6a487bdedfd826879ee28f3005a2336e72554fe011f0e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102358 Malicious code in existing_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb47f58c6daf2d861e7404ec44ebb2a41ead7a0a46d5815e72c70ee9b40b9d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kue96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d421baf793ea675d67c022b3db42e425143aec674dd2deb67445ada0d07d6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-tahutek42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4501690ac78ca2c9ae851b30df92f6ccc203c329858300e327a337c544462211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lupis99-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3df8e41fbf95ecacddc33c17583515cb2ab6ba73b3a4f4e843c3c257af9c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-jamblang87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d05d7f9002b7e5bdacdfb765583a508332e179cdee42e67cb7b2c713c5f7e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-naget21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316f949c64f0f23fd953c78037da77085fb2ba659ecd76a108d8e8f581c696a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26dfdeae338ad4ed72bf597429f3d203e7a932e806a87852359ddcd44ab458ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3858e5bc0d3ddb7ce7eaa891f61d06f49f59977d8f939dc248fde02e806e1e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-nasisayur15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb867400ac74c3a53d7f9461a4f8d4d527e768a7dc97c8941b9c8e0112a79f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-saguer38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c2373dcbc978620c6c8659765cebf43e178078e8bba8126b7b1386538dff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-rangi65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffcd58a94c871ca7cd2fea00f5fc2dc7a75f2d0ba3d9dd0f8959711d23da82c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-ruwet100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6597ce1bf91ada5660a1304829b8b77e8721866c28976882bdbbabe2140b2457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d0ffb094e72c9bedadb0105b83df5195c16b17115efaeb5a138f7a35a86c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...