MAL-2025-95584 Malicious code in nasty_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea005087d795a05d1bfe233a81b2cc2bca63dc6f25ecd945aba1200a929c1bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93179 Malicious code in agreeable_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86351a12b0feaec4241e9706fec9a3808693d64a4a2870b2162e23b44f0496ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96679 Malicious code in sound_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915a2013b3b37e0f7be997bf57a533848311a087d4d83930c76fdce17cbb0a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-moci2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a82b4821f7dfe5dd6ea93857f191ff81be11fd2eb0af97909757b63ade7cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-nasipecel29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018f5b0064b5d759e8db112eb02ae2e2227b9eac3a1a330674e7080b56ba0dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-lutis85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef9844c60f6fc44f32e3b8b60e3076ffe012d29df94d00b09daf531a672944c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c08cfffac7f3ab6b9684f23acde3b52c0addd70cb4dad9d1a283580db27e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e465ca4b3531711006f963613a8f7b92d747ca236b019a1d2a2d8ad64ac6fb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3933101dad4c3107540790111897fd82e595c992f35569b8b5ce3f680e4df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85920 Malicious code in gita-empal23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3c9ae5ad664ebddbaf25d69364437a916c88ac33557d494abc2945713bca59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-esdoger59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d99c3778d1c057fc47749627183581311c3ad0c3006a8ea6344e960b463411c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-klentik46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0635c027ec075aedad26aac4945318f290c86f8aa9ab983cbea3344f2be5a381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kentang86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5003e706c506518e76a8da0ee5d7960b504120445ba3cf94c8d7e116e6d717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tomat63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c2bc8b491e66e837ce5b7e28af5fc51c5ca292df367bbda1591d63b5b3d3f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-oblok58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d94b4fa4c733977e183ba1791bb90cf877652d40e2f48bc3fc830444af29622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89406 Malicious code in patria-kupang47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47fbc4da144c665663489f69244a59087ac64123c8c6967ffc16846b9ba839d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-jamblang90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a643f5f254d53cc4c162eb363da16e174bea979b45a426da0a1cd5b7774a659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-oblok4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cc5a2c39c4fe38a04236efdb397fa689c71ffa46ab84125e879ecaf1d9849e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-pisang98-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e397c47bbaad1ac59763c2a9abb2b4a72eceb043de1c5e8efd97553d7bac2922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-soto40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe52b45bc848559429a4468511e48fbc3894735c4a8104e8cfe86c40ae681f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...