Malicious code in loyal_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949c61f9ce025ff27ec7d38439b1c2d46a0823c88f317523e63841978eb2eb49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca84e5cea951c2e6895169631388912daa4e7318c4620297a194f279a76ca14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-lodeh20-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c3b7a253e50a5db113d7ab3da86a57803ac52ae05b71d4cf83297a0a1d08e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99561 Malicious code in arif-klipo39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f8f9a4fe4665441e644eb6d494c744018ed0643dd7fa03f933a64155dbb620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83921 Malicious code in cici-gaplek70-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94b61654bbf22608e365fc160ee5dfc7d5a8827f4317b1ad18513e1da9b6aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-martabak48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2599ecbdbdc7d5984c9e5c3d6422aedc46edd9d3c43c475276d76fc95aa19973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92398 Malicious code in xaver-nasisayur10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4aee405f7a1c78028dcdce604bbb111e128b18cfdf5f7a1776b90147f337074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89924 Malicious code in relieved_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc09d5e02ac8cd6d8d26b6182ccf3eae0c9f619e5639fa97376ef1c43bc28657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-keripik35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780b2f077cba65142da102e91972ba5f72c7d5c2f14a2b4317f5d9107829071f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69304 Malicious code in marine-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a138110f729f9bb7630bfd7cc294d29fdf6379de68f3fe99b9e7990d62ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lupis8-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8477d3f63779abf5db5ada3510f52c777db294dd21c273194eea7000cdedc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60585 Malicious code in handicapped_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8778247e998bcb44a48584aa613bae4fabb89da0cbcdf77855793a988fd763b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-gulai53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18aeaa38f2197f6a207ac9b422edc64555095bee57dc657b6df9ec4d2e27546f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...