MAL-2025-109556 Malicious code in terrible_lynx_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec2c45a51df94e40799e702160b03f301e5ab205dd95ec0b2e6eb6220daf043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gembus57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa971153b9d252568cf53b431b360d6356515127b1031a0ab1e60ee74a9493c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99178 Malicious code in adjacent_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36541ffcb0e3eb8023fe728cabc1f9657a66ba5462a811f5a44e28378de7fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-papeda16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6663ee859fa4c8227cdb754302140012bad03d7d69527f943a810351635b4706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104934 Malicious code in kurniawan-jus46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4181d896280ad06b7cf8f396510f04d4550cbbe0ce39d5e2fed0a7447b406423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110381 Malicious code in vera-bika72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264d3f8ad4ba8d4779e1402452b1546dd5b1ce3011dec23aedf02e7d0e4a2584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious_silverfish_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6b35b8499bd5433c58f06a8ade7941beccc52a69b646c9ece1375af47ae7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7c8aeaceb32b497a51e5e35dcd8ed1d7e10b568ebc621d0cc6c00fe175cee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95533 Malicious code in monthly_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6b92c92353aafc0a9338ca221972b7d1f82a8edea6ce3f60d552ad38000afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97157 Malicious code in universal_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae311a37cefef58fbc00c233d4a8ea8287f4513fc55ba393f2c296f86ba0d8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94256 Malicious code in enormous_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8b250fbd24908e447c7918d87e1847cc1d1bab8446610cc1eccd2003d78d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56845992dc07a96ecea575c7e573ac941bad08a0b957bbdaecf1c1d84f152689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-toge40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a134b0f2654a74f7864ae69527febdd12aebf0378ca975cc97cfecb8a3f4304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-rangginang74-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0c95e889ef6d6c6dd1f6c0dbe500b3043bf124a19e380a4b64fcdf42009542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d8293757043b4a66d5adc6261470e5c212bb68acc04ed407b297dbea70b196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sambalado22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ae61337b4823e7cb041cc845f2db86fa1f7fccabfc660f5575323d389a7243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mendut73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6ab2918844cb389bab93d62fa8308a0d8fed65a2665b24e145a2ccf1fcfa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85083 Malicious code in erick-jengkol98-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab26024c5c87cb9d19855992d4e01f49e736f1c3d376da66b3c8b02432a0663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88544 Malicious code in mulyono-tahutek63-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4ce29a576688aa44e1cf2ca1cf05230c64887f520504597b417b5391b2c865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85614 Malicious code in fitri-kripik78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e4f8ec4337740007331390ddc1f3025d17e436fefecc644dead8273c72434d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...