MAL-2025-134381 Malicious code in invisible_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a951f97a6ad1e2d417b128020bca25d48b9e199fb204fc599a3ee9b6c9128923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137270 Malicious code in thundering_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0a50b8e1878b47c7f764e04101f3e59a4a54a3e24335ecb66dcd6a07d7c0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131924 Malicious code in ade-sego33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a6402fdfb276431483546599cd49c78870db22935c699429b96063d45b04ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137991 Malicious code in wawan-rujaksoto77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72b35ba72c5fdfaa1eb26a140a646ed6f21f1048b919d477c5a4b384178e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138013 Malicious code in weekly_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc9225d500fffc875d71d6d6459166f974b851dd1764c488ffdc286959ad532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131987 Malicious code in agus-rujak69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd2d280a746950c44223c1db1876dff52d2a496ed0de036022d037e6d0d0942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138329 Malicious code in youthful_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1819d8217b7577781e8a7176822613cf1f3239e9fc741a30aa26d420ccd22813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-nasipecel100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ccc80267c292a1e3ba4acf0d8681286e441a62127907f6df1951acb7f18840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-kacang76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e1998ea853423761a4192fb1821085c48deac82a29661b7e3ac5105d897694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-lutis34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1231629700f3eeb36fa1e12b66c4496a8da59cc3791ab77ae88637b28e0f5f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-gandul76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b1a5068b3214cb2dc857f35fc5920e734e0d0c5ca98ddb55d03a52f07b8222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a5c948b6ef0f5d5e734712bd55119180f35ed4da0d26b31a4db82e05b3651d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b856121e8c1321f6c60990b71e519ceabf4445b4f630ceda7c5049e6d73323a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mieayam65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76056375238c15cd2e104a57815c9f4caa7a2941ee74fdb1e2d217b6aa5a0025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tapai48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f766c202538557c73e62a2ba69bcb7233832a0f5568943617b9f246f71158c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-dodol64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5973c84e7f104d001d3dd9d3867743bdf5d02db906a124961d1fc992036bad83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kripik77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99573ada78235102753dd9627d288af2be278affb0f993d92cc15fcf0e2d8b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahutek2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b723a95e3845b7ed01ac1ce49a13af8e6f7a3dc7de1be0133bd63bccb0d325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342398c67dfe1f8e79f97d37a835c28baea21ede542f8ecd13abbc317206eba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-pisang11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ac2a5a44936131bac2fb2ad3df0b8a1598bbb8946223671f55b381c3ac27be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...