MAL-2025-93342 Malicious code in back_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7572c4df0849ff724fd575e25f6962759865b2f81c9d2421d5e975703b581b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95584 Malicious code in nasty_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea005087d795a05d1bfe233a81b2cc2bca63dc6f25ecd945aba1200a929c1bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed_bee_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b93a0d064f7fc8037c3834a28b4d69c87daa7756e16ee2563fec5bd4a91438f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36c6d18fe7053dca85c2db087e037e51b937948bed6c639dc9d95084b8460b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e465ca4b3531711006f963613a8f7b92d747ca236b019a1d2a2d8ad64ac6fb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kentang86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5003e706c506518e76a8da0ee5d7960b504120445ba3cf94c8d7e116e6d717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-oblok4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cc5a2c39c4fe38a04236efdb397fa689c71ffa46ab84125e879ecaf1d9849e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-moci2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a82b4821f7dfe5dd6ea93857f191ff81be11fd2eb0af97909757b63ade7cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-oblok58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d94b4fa4c733977e183ba1791bb90cf877652d40e2f48bc3fc830444af29622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-soto40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe52b45bc848559429a4468511e48fbc3894735c4a8104e8cfe86c40ae681f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-klentik46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0635c027ec075aedad26aac4945318f290c86f8aa9ab983cbea3344f2be5a381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c08cfffac7f3ab6b9684f23acde3b52c0addd70cb4dad9d1a283580db27e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91874 Malicious code in vina-gaplek48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab55fabffc6328df3441523d38fde53d9f10f9f2d119ea27134d21a21d3d90a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88689 Malicious code in nana-kue79-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1cf8b4e0b7afc10b7ba5b9eab82ae6be40f387fcbd6184e34896ad8f6bbcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91902 Malicious code in vina-kue94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98184d4a95f984afd32a6249d7a06369a85d90ce9fd823c72017374d05c1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tomat63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c2bc8b491e66e837ce5b7e28af5fc51c5ca292df367bbda1591d63b5b3d3f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3933101dad4c3107540790111897fd82e595c992f35569b8b5ce3f680e4df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-toge50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8efbe901028bef279a9e4086166cd5bc4add3a8559bfe70ad49eb238676dd1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-lutis85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef9844c60f6fc44f32e3b8b60e3076ffe012d29df94d00b09daf531a672944c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kue31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f78492e3c5fd801802e518cd964fb6de4e43c0da2fa35b257404426c4af238a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...