MAL-2025-111628 Malicious code in zygotic_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c7d6e5dfab5abaff7155c6e9e5014a2290dc4397dbc54eeea252ccb1b6da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_aardwolf_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a0d323cd359178c6ba12e28874d7be3d446878954505f1a0ae8b8c48f0db7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107953 Malicious code in respectable_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bece4adc0b44401a4198df6b38e73a5d1a3ed4c7fe887856cc1c0a498682e7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110800 Malicious code in weird_weasel_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f515f4d6e4f6089419613b02375fb3ad110466ff85a0b6796123918d01e718ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106568 Malicious code in ogi-getuk39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4128a7e47152140b177b5642ee7163b01740fd2b6c7e312c6eb1d045e5dbc375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99158 Malicious code in ade-naget21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ac6121f121d069553cfd11878792a98d624c3ac251a947c2a4b00fd08db27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf1170e6a82c6669653aefc04de05dc9336ffc061cf8a3f53d0e948d7c01fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94724 Malicious code in gothic_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2215ccffa0d497ef9e7ed704ca70ff55a7f7427ca01a228d5824dbf9007aece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee416139a7079232c79296bbbe80776c9f3be587d31a45a523270208b08f62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sate27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b5eb1f2dcdd64bf78d2bbcd6a0127965814f747d0a3df28c0271a358a72372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kentang62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af96eb622f20974f0eff172da83f58655b72526f4356618ebf119c97284e7876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92499 Malicious code in yanti-kolak88-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4830df5c303766a482c199c413f60259351ffd90596fb3ed182bc32ce943fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-keripik61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c721c0418dcec0b9fd5b33426484e7bf85bf060da73bfc89dd65b4d7d7b3a1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92366 Malicious code in xaver-kripik12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223384f9d417fc5f52cee71c6de684becc3a0c6deab95ea2512c26db6b7e46df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92324 Malicious code in worried_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7a9153e98ddfa9114e2b1c9d08b07f802c9040e87a1205b2d96215968fac75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92876 Malicious code in zaki-kue97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47771428e25f6274e8648c437e709a12bcb8a1c6fd77384f1cf82037a30b1d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-gulai37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0735f13d01186e0212c9194cee571aba497c946eb163b634300020078e9b34c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-lapis88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2bc4f6ea60cb6950bcf090e332ed08571a53798a97502401aa7bf3a861cacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87423 Malicious code in kresna-kue37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991e75ce38b3a390d00a52c43266a93e83d923809164cf85a933548534e4b75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90455 Malicious code in select_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c7796258c12856bb762c5db0d97a93814f8f7de8156a63902f1325ece0a326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...