MAL-2025-188416 Malicious code in omicron-bundle-file-final-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cd56b17c0b82597e1e036cd7fb05112f6c2cf312bf53a0bcad543dfd985bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuua-in08fdrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3f0c23bf3eca69304f0a0f15e75dd3f56fff605699768a84ad3e92c2f38c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164528 Malicious code in prayoga-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642fa2d8278d48e1bd27e2d906c15da09f50af5d629817bdbcab8606db3eed02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nalui-luxfgsnbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ddfe078c261caa1fbd7924a07adb62c1cf942ca3610d78b4613988530ca21b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f912664e2365ad54106d1071189f80e26e78af667aaa70e23f1975b57b2fa88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3a0c9343dad286b1ef20e1972a8c34a7548a82f49549d0a48fbc80e32bb449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16715b54bcec3264d67a17724533b10e244e3ffb2d66fd64559a2ea44a0ff01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29498786838f422745862568f7413f192408a2d456f571375e20530dfeaf9c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-martabak36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12ba3b9d523881dff3a6f4310bedfeb98a0ff47e561f31ed01271b88e2c0add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b2acf5c65066cbd430c1b24ef6e64e826ab27e0dff13c0da687e5e29c4ae8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7700e0a05585378ea4693c6bce8aee6d57f068a50c0edc5fb5f21548b3a4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92122 Malicious code in wawan-lepet1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd3dc676d9e13d67399ba3bb0ac0e11333582279610a84d4c154ca31d401534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79497 Malicious code in kurniawan-keripik4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be197f11c4a3280374761b86bc855c18d889947fd7a8693b1dab8ce599d9af8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66176 Malicious code in wibowo-sambel18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143cfb70b806d0566f3df5f6472616b857490ad63208e809d0e5d8743b2b0f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ac25117663ba2d19287f554cc3f66729218f7badbbaae12e0ab25b0907daea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60897 Malicious code in multiple_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76eb13fcb75862b1971fcec1a17f7dc64d1e9e87565844ee70b8fad9ba51da9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...