MAL-2025-110252 Malicious code in useless_crab_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844dd3027a0cc57134416ea8482d1c668e96e3ef619d80c5c8cfb5a0dec7099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111012 Malicious code in worrying_flyingfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e2051ea7d08e8a5ba0f8261c303fcdcb59af15836602564ed60bfa7cfd2094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-soto38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf87e71ec291493b50600f607b436ba24ab5903448110742f961b4ac07e7dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2026bb00675c8dbfd010c2cc5dc772cfecc57e3497c8c10d85745556129fe58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111559 Malicious code in zippy_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633cbeed79c083fdb0d4d61017b12645a10b8eff7bf8f2429ade673f2f27ba0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105927 Malicious code in moderate_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c358e77fcaa98d495a1e02d3e139519da9b49e2462f553a804b072d00f4b7291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421d3063d4a1aa47cb7b006641302c595ab358d01d6ad095c0b61c66d3c07721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-oblok85-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299faa167cde385d5aa715caa9f84c5010c0860ca4ba14cddebde458e791140e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97755 Malicious code in erick-kue79-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52de14ff72a7387c6206902b1c8a34c6f8cdd621c90a913902a20756fd6c703a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991d76a00d2d727cc471d943b6d1f4f98f44d8edc85bd1661985d78b5485e057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94188 Malicious code in elaborate_aphid_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409fa420f0177a0a51ebadcd341e48e8f036e647f7bbc40059c19bf86c09c253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-rujaksoto18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb031c3c129263175ed43356bf372081ae86bb9b67d609e75ccd07ab3f4d516f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92777 Malicious code in zain-jamblang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daf7fb5672d3f98f93388b1e3ece1772798d8f6130473df95bbf1fd394c194f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-mangga78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75ba660aa266a42c9de4c4f5fce287baf5ad9934c0282f72e3de36ac0922e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88550 Malicious code in mulyono-tiwul5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56cb202487184b8cf07b5668d35a74c04d993b3c709a986e16e00ac8c61aa301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81991 Malicious code in utomo-oncom52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b654d22e1d9ddce92d2769b51cf03b6d4c97c10afdfae90634f092623bf9c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81735 Malicious code in tomi-serabi54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10625f7c401e02e60a4da45facb18ed461deffadf7316c28356933086c8be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-kue15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f9cf6bda1d985d1d2246d4165a6de9df47dc7d382c09fe728d7505273057fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-lapis37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a2564fae06cd1b3262b72b5467d110d7854251d26cb72be85c2c8bdd797242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-wajit16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e13c9fcf0e14516edec8a7e73d4a32872d4f79aff4813c650297fd0adcd2bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...