MAL-2025-119411 Malicious code in dewanto-lodeh67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8326b2f30995861749e7d0f3390aa653318a20bd9f062f89c406cb0087e257b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-jengkol9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070d58d893c0508c8e47a1afc3469716916abb03ee06f4bf56fb5ace6fa2bfbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfactory_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7959100b0f8185ef401f570e6fb1acc53570d0b53f65a79df7109fb86e1a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113839 Malicious code in fajar-bakwan63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5ebd5d6e763e8c2b4bc7ff22b7be9e0899b70c2dac60167c04d450863d6d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101738 Malicious code in dorsey-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59ff8200322e35413e0028ffced73e4ef5c9626a8f5745168f83d0009b8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104545 Malicious code in jeromy-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b370c5de2ad5dbb235a63b6a9d98d98795588ce73a42c7a8eeb5257b57c131a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d444aa30576e535b709b2ce1fa2fe20e37ef02f8871cbe511dffaafce929f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e073b3270eff117bacae7994327170a6a7830627a55f2a72b8f572ef86899758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-lutis63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f6c8eabcc0071b6cea673c28c7a97aa4b832e95ea076b72fca21caa3612549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-jamblang51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07cc90108aa81cad5b7d519cc86a7cdcfc730d6c278ed00cb34d985e2d8698d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92931 Malicious code in zaki-telurtahu27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75eacf9d741d788bc8746a9296038da3c564c750817ebbcc042c387ea376e502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-donat99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef3818eb5d5fa6d5d4ca8752e5d4c71cc0c9140435526c3c1276b60f21f73963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-ikan50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f890706306916afbd7d51234de69559f36a6e8a2c60cb48ebb2a0e47ecc2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-ubi54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0f465cf6a9fdf7cc9bf84fb05de81fb093494c40c3bedf5b9495ed050c606b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80198 Malicious code in nana-rangi100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b44dcfdb3932dc8ad1ae785b3e912e107ff60749f261c1371e273677d4ac25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80792 Malicious code in putri-martabak26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e658698acd726af2b87bb0d2e94d8051bfb9d96b849266ee3bad221abe1ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74281 Malicious code in mahesa-klanting73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c5a004aca47e0ab5686b19fdc5900fd246e7c649f00a4bdcd0ae0f189deae9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66392 Malicious code in yuni-serimuka53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2e6cee41bd70775db2a7a9d85fee658da2805b22240988804ba8ad59a4588e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550a134328f80ffa4b1dfb72f16fc3c3ab2c001ee2f672aba812e18216f7dcb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66177 Malicious code in wibowo-sambel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211269c5dfe5927b77a77ea0667aa421a93c8d91e815ad2c860d5c418749e07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...