MAL-2025-60505 Malicious code in fragile_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ecb5d503453a0d31278feec65d118295e317c0a54334a715b89933cea328ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-botok63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18e10e174bcbf4a1fc02e8a28e197e29ea06f959f47958c9d18a27e8862fcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-semur88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af9b1c715a3c1e5f2918d4e50f257a7013ad32bd2398240737306a2712cc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55401 Malicious code in beneficial_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e792cc0298140cafd3d0d8d9c6a98aaad27a1d5f09fed0d68a611fa955286bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57114 Malicious code in joni-soto4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcca3aba261bbd6624d0006391713f15503c31e1014de7d805208ff05b053e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56515 Malicious code in gita-mangga80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a522d49bcdae275593512dcb92b201bc6499020886bda6d3cba7173de724378d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58158 Malicious code in political_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f25a8780be7d297174f3dcc374e4fc07a9aaebfdebfe1551dd1f38c5f5f975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-nasi94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 321e5d5fadcd38c6e2b8ff28cec3878f501cd0fbc985582368debd1f98fb6e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53744 Malicious code in irma-serabi37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb3ddc03005601746372a383e7f8b32a2477baa08a66b415c516b6b30e48a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-martabak26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6521a537102c31067aec8f8f2205e7e9d13f0e5d1c06f84b3b457e0b5af476e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-dodol99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8186fa554c1f00ccb8381486a52ade5d2c67e64fa04b2a25fbe7c8e50b2056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52825 Malicious code in hadi-tahutek97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554181e30763f44bfe0aff26204effe48a4dbe615512a702ca45e3df5e6021ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...