MAL-2025-108966 Malicious code in sparkling_booby_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7a2382e524fd0dd8ca5ab81aacbdd0a5b7dd10872aaa34463b2e83e61d993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110086 Malicious code in uneven_squid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b58725ed692a86b730e0221d6066d80eed04bbb2ebccecc1d81f0a14832549d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amie-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f69162c6ff8c05657e4f43c57aadf6eba82ff111ec5cb4ef19d8ed3e81768b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lumpur84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1a8c138f036c3eb9792ca25bd3ba730d983127aea98dff4ab38282ae31908d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-rangi63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda0a39a63a1f526e06fba361e3c33fee256317d8fd82a899560ef3d22c59273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0920d5cc0c1c1810bb148c7f61b5f6dc8205345c2d3d051eeeef8030b472a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-sasag77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87491def674644b926b2d06cb8ec82b703f154323b886ec520146a283b3d80d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lodeh9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabcccba74d69e75cd3e3c6d49c95653652ea6e470fefaebdf32fb1cdea53ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103700 Malicious code in hendra-tongseng47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdd2340e5df51a66d670e8fb6a901f121d663b068640a8e6c948da98178da5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111434 Malicious code in zain-pisang69-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21569a6cad52397b50b5488b1ba8bfc322087ff3a4a6dd7fe37d17d445602413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104703 Malicious code in joni-telurtahu32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39efdc5a991e676e4dc88eae5a6e63c91461d56213d34d640d41854f9c537b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kue58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b67439adbf79d2dd12adfb8887c2ad327b120c35885cf14e55f246ea9a6a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-sambel86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a5b0fcb3bb741c5f673d961efda433613f8055d911bd5bd792c126acfc98cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d997de4c879b9e4d7dc5b95b331fdf04c5434902726a93156f016764c902f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-semur44-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8c54e115cafb78af9886e95b9c0011ffddf43b54bc64d1bde43912f7c460fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104585 Malicious code in joko-gandul56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e40d09254adb25214dc9569fc4dc01dea17d526a3b0501bc0e2f8badec8cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99580 Malicious code in arif-pecel33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3668253b03c38dc6d0d34c8e3919bfccd81166efe5cc058d5a282d97172c379d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105403 Malicious code in lutfi-ketan2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a61734bb96ef0f7d10ccb26df088159cae5405fa6f992356af969ffc07b76a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99191 Malicious code in administrative_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782e37c255ce81a97bc5fb2048c69b5be349b5b6b99d88ffd8272746612f6eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-nasipecel57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6a4af1bfc06f35886cdd248a0947fe2d4166b88618e948f58c73937a6c5d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...