MAL-2025-102990 Malicious code in funny_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19b0e711e2ea515c3db5d55270f000a40304965f2375d3f75901a43dcbda539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95971c74fe8901472b17bbd74ffab82ca6cdb784065c2af0fca9c510061da13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109780 Malicious code in tough_antelope_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946e8db5fe727cd85432851d3c198c29bcab78db45512f0ac03f7d217b85636e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6558406cc97cf6e8fd188311e1b7dfea540dc20f56f25e23d73cda1743a1bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111177 Malicious code in yanti-klentik87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc2724fc54fa39efa399a5b87f70a9aa72a64ae718d19aa4503175ce7311eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110879 Malicious code in wibowo-rangi62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b63094e703a6d00cf322985a3ab365b08315748aaea8cf8490050abc6507cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99220 Malicious code in advisory_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035fd68ec00b8a87fe2d5d9007684fdff9e158c053195ee7f74b8467b2991b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-keripik13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241759349acd00e0ce840f7c53a85ddb4b82dccb939ee27bcd9c434abb633702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-klipo28-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402e6d06e4911efa342ceff1f6cf23983ec30a6cd9647ba3eeb2571ee2c7c9da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104841 Malicious code in known_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 524355f21e9ea604f6b1e0b8272710682f053ecb6fffa9c97c96e3dbf6739cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109746 Malicious code in tomi-papeda16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6663ee859fa4c8227cdb754302140012bad03d7d69527f943a810351635b4706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-jus85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a004bce6d0b1d5307223de3a7491a3c98ed1d62e931d4df970aa40664dd868a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-lengko41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a37c48ff222e37b3eba89f774069a983fee9dbdb3d83a31ffd3b2f7911b45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-klipo41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921f9c949fa4b69566a17c30afdb75c33dcf672deb25065cf6ed3d3d7184ef06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-mie32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc5cccd72328063164b38a7770e2c5ac16a467e5dd6c6ca3403e3a9b0e0ac94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87137b099f070ccac1ac875b9670a03f4973ff7132a66518ed72bdda93bf15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f460d781d2b88b4f1bf127bf2e5ef5900f18e5ef001936c7b9f34ed60e53e732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7de5a9cc95f0d31ff4be76990cf78a18cae189ebf7b067a1bf1657292ec5e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94411 Malicious code in extreme_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4965f7a282309200d5a3a8d569b8dbc9ee5cc3374e61aac9764ef346025134bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94797 Malicious code in head_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a23c9dd193673db5818b2d919dec2e4e980e4addc6cee780c5297674b99e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...