MAL-2025-98404 Malicious code in testy_aqua_cephalopod-6-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd7f58d0e79dcf202b0d9ac9127ac9fbac2a5f757b2c54a7a5aed2aee77edb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90281 Malicious code in rudi-menjes79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d308b05be58f2875c43c6e7e2a8f03ac4c80f193fda880d886b530ed0fdf8582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86346 Malicious code in hanafi-tahu46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3fb6b1818a245678d109efe6df96f4efd6f4485f1774b2837b713b57162d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85320 Malicious code in fadhil-gado-gado38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a14399f901e65e4a2299cdc25d4f50d6790826b8d6465096c588f2a73a34a01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81530 Malicious code in surya-kripik30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5005417de5b516def94323951bec8922d96c555e904b3fc89be6b3709d080fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73837 Malicious code in joni-tapai67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1007ef82e83ce919d0911d61a81bfc60ca8ce7b22e8f28e26e37bc706ed50d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67866 Malicious code in dreadful-teal-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c93e1aa6aecdac7f678ee5057fe05ab4e246c45895afbc133d9abcca69bb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0a306ea04e911fadcc88c36151aef86f5a1fc4a86f530d449dd622d75988b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2735dde186baf9e55a7ec96017e91c47a5e67e614af6d0964371a846f1a16bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-brongkos86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2534ecd6569e82a0915872924bc73c1b611e6736a0ad5c94f4c45c5bdd34b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c59b3d0438bf64692935f47f5a7b41958035d9e20d5452b7fae04d517f7097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61d74320c6a12884ad74653886a86b280f48b6faf2b3bca6f6472a5672ae060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9810bf414d0a863c8710b60216b4ebe2f0009791611a9c4d4d00457b68bb939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78870209986b52236edc99fa805f9006037af6ef7eeeda9bf1c71ac7d2ba2995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-jus48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70bacd1e8260ef2034ebd26e1f43cb5f050789deebfbd27ca15045e7b4698eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-donat41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b8f90b04ce7e239fd322b1acd2e087df6f1c6e4600141a6b5f11e6035f6439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...