MAL-2025-100098 Malicious code in brief_crayfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1739bc00acef98460288cbf650a63259ea672c97cd3ca74f216c9905b2cd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107188 Malicious code in precise_fish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247f606bb7988d0b3f4189c309db85fe0a899ea7b2636df19a33f931687fec2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110566 Malicious code in violent_thrush_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6355897f93b32f836f8c2e09509d66b5d5a16cc47fc32fa6e61ec0b4604f9429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101290 Malicious code in del-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde5393c9b9db5797f6cc2ebd77a7ed53d307ae1c3336a7d0e6b1c7bbf194acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102068 Malicious code in empirical_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319a2b1da483146630fb3367390faa50fa98a57b0f5b8d4b8ebc7de345d29a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-mendoan1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdd0539829e45998ff157fd86ea063be6892214a6912a83615da9c3e9d6ea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kue24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f65ba05528e56fd6e3cfce06c792424179e8c01d446819bd2b028c6aede37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93b601ba4d9226659c9f82981d641b34f5ae592526bfbe75ff53742cdf4087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-miebogor13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadcc5e795c61f0883f4e3f730626840c429ef55daa8bff30bb9ec0e6253718e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tumis69-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23aeb7d204a9d882e612f4a923f60ea4f4a0921541513cf4b1236fdddb197653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kembang85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938dc7ce2f5a9d49a5df64bafc3586d4b92fa6de204168be7f4a2aba34848d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8f9297f83230de43df73c6941933850f0b3a8de411c4d5c25937e4ed2e7572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-martabak13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d8c3bdd617f28e7225233c63b268634872da11eab1a8eb0a3a477d6ea1d578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-gandul79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22b1a2f0b20d882b427cdab1d114e2f6ffe8d41733f0bde6dabab3a69af2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-klentik5-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d275566d11fd3b839ca015aed4043080c8775cd2c43bfc7f88d3a89cafcdb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a7dc96799f542cab93f511604f466980466e168014dcc3ff57cb6b8f45e194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-gulai85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a81edfdd3b5dcce1e89dca0738340078225e37e963d3671c7c44de6082d2a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0b8878aa4e24250d45ceaea9f952e5570fd69d4e679ecbc9e53640ea3305f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e48c682edcbcca51ddac14ed3b84e4ffc39b380ba905fafc686a31d27515eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-wajit53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1589a979bc591625034193be833d3d16533735433060e6c8fc8afe818369ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...