MAL-2025-106097 Malicious code in nadia-lontong100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbc9861bd53b7bd373e2d8ec3726b211105a7d0322ca2f6ade3cedf5ca9a4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108042 Malicious code in riana-saguer23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fff87876ece5e2cabbdb7853b914cc911c382c5beccf96842b2edb215cf084b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101955 Malicious code in eko-kue11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29f6109b8728f523e3a4619591ec117eab2c9c2154c3a1e7f510bb2d8cfb664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108119 Malicious code in rina-ikan33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3eddcb40235416af8af667d33ecfc9858ce45238d2306210d3c8f95c4eae7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98905 Malicious code in registered_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124aa81fa63aa3db079d9b38f5242fcc3c1a76ddecf92ced15fd6779280f94e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98404 Malicious code in testy_aqua_cephalopod-6-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd7f58d0e79dcf202b0d9ac9127ac9fbac2a5f757b2c54a7a5aed2aee77edb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97880 Malicious code in hadianto-nasicampur43-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a4eda688f816e0ea5c1b2dfed0e813b4570c5943b3d83db601ab971daa64d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93763 Malicious code in content_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb58ab82d2ce27f198164b05b17b1f49735482400d24533f04476b3e88a52cc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_slug_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd3f52663e46f29a2e9f0ca9836b6444e6ec420085fb74bcd0e9a4518b10270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95374 Malicious code in managerial_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706b84f95c617fa8e1a4b212c181049d595ea45c7b9f0f8dc84c80628fe38e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8eab1bdb2538ec5e752668a822d78ba8115e797b9542a29f8f0e15b0c99750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutral_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a546b8aba289482cda088ad925d39a46b4fe4bc38fbbe9ae535566f9f360cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94750 Malicious code in grieving_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8807b3484a2f050afc0c16e2ccf26f3c815f2573adcc5b5d2bc5758237d60294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tahu28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ab885de0ffeafecc3a0b095d048751ac8de1ac6797f732293d9a42e0fc8025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-nasiuduk100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046f632d09d6ce0aa8cabaecbc618cffa40c9599ec31256528205ef830087f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-naget87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a563825280300156bb8b170760bf1bc49830749f22c60e22934936416b333f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86141 Malicious code in hadi-lodeh90-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7485386e560d6484f83adc2a32a9f6d2a0c64b9807553fe7d26370a62f4ca474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-moci81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f302c3e5a6790fd5bcb62644a3734a25315669dd094f9bd16fd1d0bdebe9531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-pecel57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60196f65d72c48d9af7a6ae05e07c8bb5b4dd2d094f8e6721a19f033f67f3b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12aa36be63e6e1c579e3a648c68ea97e06251161ac24506cb4145c7d279640ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...