MAL-2025-94021 Malicious code in difficult_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385d6d0c35daa554ba7349d56dcbc1f7f0200cc3e70c877e676ce1c1fca60cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94650 Malicious code in gastric_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df89bc4bf65a3dcec57828d22fecd220a9b1de5536d8321fe78a87eb1b3e1579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95031 Malicious code in inner_crawdad_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435fa81a842be8d927305f0acf8e064e404eddf5c1a9acfe0edb66c3ff47d201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disturbing_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6a6630108b48931e3ee4fde2c8ca2e2410c73175966ff182440568a3e7272b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93557 Malicious code in circular_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3692b3d7007c8bcdb300e02018dac3d4183e47d1c9a74554e3009d0635e310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tempe3-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c580001226788730b3e4899079ea7bba74c63819dff62c0df483b69982fc5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91396 Malicious code in udin-oncom56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a067e00abfb4a11e7820865cf3631942d6476e11702b96fd153f0402f68ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91675 Malicious code in vera-bubur88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b54a31a56ecba1c795f8f424bc2e844ff4b8bd8297c45c4484cea5446bf368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-kue30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345cfa9d8f37f9ce79784ad7e38cb2af46d33a5fb09de76eda5790ca69b2c1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-rendang7-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da84d20b4f423f5e2ad19c74132f40f06eacee7bfacea9eafc7efd52d3f8074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85468 Malicious code in fajar-telurtahu51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671ebd36efb63eff38be10a9fc015bf5f82671009876a382e9e55e7f2ce79dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88891 Malicious code in nurul-ikan12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404341014d3a89daeb3fde02304595d4a1c42ca503826fa0df82c19fbc1104e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86144 Malicious code in hadi-martabak100-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2be1af5b64021308c325f24133dcc5ffbe62bdf4f9838c0fc40fb3d5305d414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88649 Malicious code in nadia-tomat72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d776a002ad45e13b1d2f296bb1128741d0a720daaec49f0eb675666c04a152f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-gepuk85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6937cee5974dd4940bc710c43006b8665ac98f5b4c1eb28e4aaa7e6b30f8ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77815 Malicious code in eko-empal16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf78510448bde2526e784d477be0063663e7a0dde076bf3f9377c7b1406399a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-gudeg35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2791cdca623cd44dbc6171a0cdaf3876385d3c1f4168a584ac5b5278ac9ca3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76114 Malicious code in wati-gepuk89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b622bff8c3cb074212621d9ca570767bdd257e52ea2618ab45b5bace60e3a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74580 Malicious code in nana-taiwan54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c97d522ea9aaf3664120bfbf142ac1de7a7ff9fff4c5205f86fc6fc2ee0a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-telur42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9aeb0ddb7bba49dec3fc170ddead8b3110946456c7d575eb3a596ecbbeeef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...