MAL-2025-106568 Malicious code in ogi-getuk39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4128a7e47152140b177b5642ee7163b01740fd2b6c7e312c6eb1d045e5dbc375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf1170e6a82c6669653aefc04de05dc9336ffc061cf8a3f53d0e948d7c01fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94724 Malicious code in gothic_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2215ccffa0d497ef9e7ed704ca70ff55a7f7427ca01a228d5824dbf9007aece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-lapis88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2bc4f6ea60cb6950bcf090e332ed08571a53798a97502401aa7bf3a861cacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90455 Malicious code in select_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c7796258c12856bb762c5db0d97a93814f8f7de8156a63902f1325ece0a326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-gulai37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0735f13d01186e0212c9194cee571aba497c946eb163b634300020078e9b34c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sate27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b5eb1f2dcdd64bf78d2bbcd6a0127965814f747d0a3df28c0271a358a72372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92366 Malicious code in xaver-kripik12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223384f9d417fc5f52cee71c6de684becc3a0c6deab95ea2512c26db6b7e46df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92324 Malicious code in worried_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7a9153e98ddfa9114e2b1c9d08b07f802c9040e87a1205b2d96215968fac75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92876 Malicious code in zaki-kue97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47771428e25f6274e8648c437e709a12bcb8a1c6fd77384f1cf82037a30b1d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee416139a7079232c79296bbbe80776c9f3be587d31a45a523270208b08f62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92499 Malicious code in yanti-kolak88-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4830df5c303766a482c199c413f60259351ffd90596fb3ed182bc32ce943fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87423 Malicious code in kresna-kue37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991e75ce38b3a390d00a52c43266a93e83d923809164cf85a933548534e4b75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kentang62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af96eb622f20974f0eff172da83f58655b72526f4356618ebf119c97284e7876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-keripik61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c721c0418dcec0b9fd5b33426484e7bf85bf060da73bfc89dd65b4d7d7b3a1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ff135f1ded718337bda64669a74967f278f99e508d2eada9c8ae645ed143ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77017 Malicious code in bayu-sate16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f99daf59b9f6b91437dbacaf564c680a528a5c53d571fe9aca17f282b14e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasisayur6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be15d18b3732d0cc0453c9d558b97608afca596d17f3e69bd9ed57453944ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81493 Malicious code in suitable_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1df03d346c880314fe0d6748696e9cea8bbeaac993463f8f6db1a0df61689f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-gado-gado32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c715f5ec24e48cab4ab9d692102e6df2553b3e9ac41ea5786b4d461d6dfb9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...