MAL-2025-94196 Malicious code in elderly_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76a831191fed96112db4675dda730c6f77ba315ead3eaf5b88056d47f62b42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96891 Malicious code in surprised_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c411f7a0f7c9ce28eba231278d88ce7de34b2a54c5749fa5c61a1a251744b475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95837 Malicious code in parental_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 003bc6cbd95c16bdc1964fc6f2b06b86aaab1333a67416308725dbafd442a8e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-lapis19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f181fedafd82dfbdf67edd458655c99226b059438a9e86a2c8feafa659cfa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-telurtahu37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9537dde7eef9a3f0c86dcfaf19ec0b0726ce514092aac9732f27ef511bcabccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kemplang2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a24f1c112a7c4d52fd49f5389a3499b9bfae80ec57d6c0901c58a6e3ca4f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voinzaril (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87d5389506157d77922d3254f0111da25911ad85a83982960d13f9574706e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3014bd77fc006803b0310ca4005da37415bdf95a69a9b9c524925c618705580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3d40583d36814db00315d4e6943e48e6f666d0973167450a50bc639c0dab0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-ketan72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa96bb9c9e300a08d787a646fa323403cb911c5e4fcfc4efc1c43551a69e3b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca34754bb11f38fb951b772c74289514bd936e2deb8ddea36a8d9345885eddea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-jamblang18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85cd4d88246b86c7901debf8683cd3edc59b5ec1fa6ae1ddf81a510d1bade3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-gembus49-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a290b52a939a3ee0a45fdf535bb5c245a12364047c1268a8ed8086dc7d61f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92f4c5a6024f7ee73b590a5c61b119cab1202a941b517538cb017d1659ce6cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inclined_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a3bde3f0ad9827a37951a73f9cc94467c0c04932feb5cf406bd09051cd62fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-mangga39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73c51a46ec7b181f5dfbee4e7a471cf5adc88da02021bedc86b2b068ddf946d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gorengan89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9baee5eb8d569e7cabbeb2ca6e00a3d417f6b00821f0136294938ec422223ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-tahu60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1d428bf6d2d120b9094fef9824ba48b5f88942cc648dbf9a522f3ce48af0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-nasi71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1170eea331c2f2a4027afa074419c7052246863899424cf9b3da98834277998e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-rujaksoto41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd38f1b59fefd5f7def02127afa30e3af54d5144006e5ac64eadfe6bb3de5e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...