MAL-2025-134086 Malicious code in hanafi-papeda40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6dbcac2e5e6d11ff0ae185a140a33c4cd6694925f8111f13cee2de90d4c656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119927 Malicious code in fajar-botok17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599746c91fd524d4a062159affb2f1b5af78e39e9d32c1c1975bd5b817032ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41019f1e9a6232adb0b50c7264858faa45ce6f31f7292def15989ab682cf9e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14319151cd3db6c7888129ef22e351b101e6ad1e519d0f2bd58043c3f7622cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6613218b45300b0593e77c0fa2a66e208036d62da8f3fe8c7c62e58b4c570b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118283 Malicious code in yanti-semur89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc67562c5334fa091617059156f49190329ff38e2c60367237e50f0078e8174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112023 Malicious code in intact_badger_moccasin-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35aeee4dae7d71575d6cb0043c61b1addae8c098f6abf2f5fa15513e8aed4bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite_sheep-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf19fc7f735addd1100929d89582d720f718e019de97353f8d26ed32cd61101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110951 Malicious code in wily_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a4322c4f5c8edae2fd0f3057564b8ec9ffa978eb4da05101076c0cc6518b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32ea05f30ad9bea47d26c2c5b9d0e3b4fa6dd5f8f7c3fd8a4622f20343c076c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c90c8f7f634acdb921f05762fe47a12a5696739e46c56e5acfe6ada07d3c5fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a23c9dd193673db5818b2d919dec2e4e980e4addc6cee780c5297674b99e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86305 Malicious code in hanafi-lengko99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427e266b73c9536febc27c71fa1a6f5747b6a750468be43b5ba86e97599ff732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-lumpur51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc69cba1b829859e4ec863b416a6ef15e35ea8f4c583e98eaf46a0fe6f874c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81519 Malicious code in surya-esdoger58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c8beeb694a5c6f420e87c804deb024638d23abdd89d6cb54c1aef47a2dcefc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81921 Malicious code in umi-toge31-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c260a45230cf2b926b0ddf68502eec359c05295e91f57ef67c0975c6715b14bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76055 Malicious code in vina-gandul73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6ff0a0665eb3299958b9bcbf4d5beb86e7e1a3fdffd431d79c7febc867c2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sexual-beige-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb26421d89f07d8b0795b98c1aab8569edf6256d1f753680af4a3bce62acbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68141 Malicious code in exceptional-olive-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6559adf490b72c6743b31e0e428e1a0e9f377bdbfb0f2238ec95c7e6ccbd62c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-sasag45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0be61f3cf529a1ea652bd4c5f4f0394f60b02b6e59473c2f9dbdcbc8fda3893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...