MAL-2025-155050 Malicious code in fauzi-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c795b0f2ca90c15f0b557618d177c83c02f425ed69ca16edd6b821aede88c824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166766 Malicious code in teaadggs-musni-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbe402bce17372dfacec9b0ead3af170423567209bc8a84eab1b7bf045c26c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167468 Malicious code in teagood-nalikami66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cd5e976ff3b97299b35d0c85557965dae7e3ced9d1af3b65f87ba0083e7054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-eleventy-google-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-algol-npm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df4076437c513112089b53d9a85ce5172d0f134afb19ff5def94fb7a291385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-process-proxima-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b237f192f447599cb3bcd59b42f719076d5e72dbc8333c2cbf1ff799b595a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-getuk19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374c3f8cf44f56ecbf2155641e0c6746fd5267e8b7a6e3b6ffe371a055c6bff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27152657ccbc789c2365c15a97ce2e29f634171879b8071b5808af0e71a85ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-jengkol18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615ec522cd514774cd35b283599f7376b3c2b3d2991db518600ca30cbc73f304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-telur96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c91cee4c9553af862a144a6f9cc86afb190ac4042d3dd16593744d265963f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119694 Malicious code in eko-kue85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f94bedf32ec1b3d4128b6bd25d77919fd2adf263a33c8a251e832f507a0f988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114234 Malicious code in gilang-tumis33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf987fd4344a0c999eab96d603fee6e56f69f450785f760e1fdcf3e3db2e67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_rat-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db601c19fd5bb0f9f1dce799f9a6876cacd8044aaa2bb55d4c3ac4b46f1928d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7838c9d633e5b5f560bc4e4010c4d8f3c21648c079f0cb6f2b166730a873caff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109020 Malicious code in splendid_crane_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3d7caf0d4d7ee8397fc66ea44b3d4ee42f51511f4044494779a9ac118d0996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99224 Malicious code in aesthetic_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf5ddc96f15d225577f4cde195fb0b879e7179842edd7ba0d38b372ac13f996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103908 Malicious code in ida-rangi61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2876a6bada18df685dc163b8f85d6b6dc14d2605ba2156278b1c9ae5407bfbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff3326b013d2e952e82d181e1ff3c3ff4e6d8233379d8621b074a3dcd02da39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-kupat88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb966e97897378e5911cf73e6faa3e29f1a9c066cc4a6dc76078408124482fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-gudeg92-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13165ccc5f4390ed8c54283c497d781c01f28181d60fe00d189695b50a85dc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...