MAL-2025-86848 Malicious code in itchy_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9592e10e48a2e919c57930002838b0aa08c75a47643a80d0d4f42a202aa70e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89787 Malicious code in putri-tahu76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa4744cd2f677f1c55f11d49a822bac31d808afa8bce78fbb5f1e8b2013d99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92317 Malicious code in wispy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25cbe6e00630352ceb4df37207419c435b20a4eaecf14d3514f0b04bd7a281e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88831 Malicious code in nina-oncom59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e39d5cc444c3f2f1c1fc6ab14ff5152b4dd43fb8f4b3ab02506c17d5200d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91419 Malicious code in udin-tek29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2ef1300dc0821b5a2a68dd833ec51638f5af9814af8c38dc4eb411ec11c127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-rangginang37-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088a6acef5b168660337f49088c120d9745606f81e90a6b76a0afb9bbb295d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-martabak5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4898750d4f6ac4bacb5347b08a66d6af0ac6842783be9c9bb3429a956aa867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-nasi53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57242b045a7f88cee47dc7405810bab26bd65c7af94ea33813a740551ccf03ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-miemee16-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccdca6691eeed31edb0199a5d207f9c6c061ae7e0951932de3429338389cb24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gandul91-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a118272ebbe252183c802e8c3e8b236c090ff0404699bf21998e45a0a358ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-miebogor12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000ab1b064dd7fcfd31c3cbed44623fef53ca7d036bff3bf5319a45424604162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-toge24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6638fb470dff37badb70362f0d5ccddc830a459968194ef1be3c17935b993d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94485190c4ad3619338f33be4353d16aaf6e913693aa2bee6f2e31d4b4e8ce0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gado-gado26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7756bf7825ca3c11de2200b7eddb58f5a7775035a2f51a7cc4dbe22e8176f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-lapis30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa26988cffc902376bc4891d4df296d5f5de2964dd6ec7d104b2118352320e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af4e623217fc0c67928a501b22260a67e85b7eae41132e15b9b0d146f26b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8267aa96cbfc6d7e6995cafb2b0fa0e4b4bdeb65c41b47721710b1ec7c02911f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-asinan12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8481f0fcc611b2268a425a4f8cbbc7f6c8bb2ce0e44b3e326e939190fdd68bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-mangga77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0f6dae810467f5c02dfb53947898fdb326164afabbc726edd04d5acd3f8644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-dradag53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318af3d7e60bd7cf2d3128a0eba51954b507edbea529745958c678ab4bb36bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...