MAL-2025-93422 Malicious code in brave_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bbd727753a9ac06db91a8d62b7d22155c081126bb62aa7d6e68c3bfdf92a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94818 Malicious code in hidden_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f23ea0e5c87bfbb863cf4d4f6cdecfbd891e54db7d9ac1bd536b4d9429e8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93264 Malicious code in architectural_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24796d67c2f29efd8079a0459d7d706d021415e86e8cda3e0ac981aa1bb4aedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96173 Malicious code in rainy_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a406536a1dca1578323034ceaab14ebeebdbb76e21948a2d50f5e8b1128365c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-lepet63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d1cdb1a56c06ab0f14b0a82f377e59e36932a224e29dcb663ea641f2dfd3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-rujaksoto91-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad375ee8bb5c074ef0dccaf439cb0cb432489a9fc6812f5c03606750c0f96fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-liwet9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a6c6aa3621b593e7e4ea0e500d2bc00f5602172135d5b6246e632b8df2a0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-nasiuduk68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f948b284ab27434e665ea66ea4ee0c71e8eba7ad3ad1cf7081c7f5153a6e2e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-nasiuduk98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4389b3f72ac1b60a6d7464a559e016197645c46452960695a9969ff712ff5221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tahu31-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a67d263d7f6e8995884fef28a522d07063a34c7fb5e1fb27cd53f9cdc900db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-moci9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624b92745d75741066ec8562263cc39f714f2c0df7b222546c671793a785d5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-taiwan43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6a785edf8ee7f0f6241879f87457b6145bc9cdb600e3643a26750a72a164f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-moci55-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe577bdea06863da4644565b1a9376f16e2808de1adca5691e1d4425dede62e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-taiwan25-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3520faeb14bdf39d55de19fe604b20a160816c4bdb2dab2a693deeb222c02632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-botok96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c068a9bdb24b72851d5cacc52b4fed6be237f32a9bec4d40aaa8b334dacf52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83fca9c2b0285c2986bbf409a49b95a80316b5df4744fd2725bb89eabc8ce27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lapis48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1f6fade617072e2e6104a0a849c3623ed85cec9838a70b1efbbe0608823cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-enting62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf7ea54fc90f533307bd5c867583cf62d29124019b12dbcbc83fd8426f1079b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lapis24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7438c631374a33532e3022f803da4d9ce1f54ce915057d885cdd061d0337a93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-serabi99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8fba6d9f7b5b40638841ec6eeb7126af1d50bf15c1ac548df217b6c9d1aad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...