MAL-2025-186639 Malicious code in draco-gacrux-carpo-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99af30e309e14cdab037f48e58b659c2e89b47c57ea0ca10d2d97b6c7f47586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181993 Malicious code in flights-lutg-oidabilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27041d654cedef123189d199b7f617041c7c94f9ee3c61a8db57bd7df566f39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-danabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234230d6ca9a72313a64dcddd488a4d1a3f7e5208f8cc76e4013bd81e0d69a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-iviobga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f51239aecb8a81b4a5e5a83aae21145d6f31beab3a49921df3b85010fdb8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-nusadsta-manud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4028b0f7b8f9459c0989910777f0a4f6baa569eb0e8ce9ade2f39e21c12e9e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171648 Malicious code in neulneul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473718ab50f971d9e1f8c184c6e2ecb6a58dd97e74aba0ebfe0774c27dfbfdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jacobgreen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7d5074e498a6fb979f6e51b7205d8ba21b0e932eaa0f6b444b2396c0320052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40f82cabc57e7fba42ab4b35b16afffaee3adf160d0242b9756f73479d77660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152908 Malicious code in astia-al1f-dareagauaaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412c17aaae99eba9b62e08e0ca827f6c803c386268ea8494f5abfdee38068c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154581 Malicious code in dian-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860c46bceed35bc62938bb4aa9823aea0673be53372e6a70541b388a9a010df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137708 Malicious code in vera-kolak42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce10cc1017f93408b807a76f6841ea5bf84e0396ca329504baefaace682b982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-peyek20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125c7f4097a93723e116cbe6a045de456676fbcb0ba27afbec9339ff51c64fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-ongol-ongol11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1fd2563389ec2e3913d0fb14ae75f3c9514798d01f53c50a56416f4129c4a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114988 Malicious code in jaja-pecel80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb08a6eed7fc52220306beaed8955a9e5469955434d6d3f3460a7ac9068a92c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110300 Malicious code in utomo-tapai73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e8dac583b535bcc5f74f139f87edace95e57d4c2095535bc08ce3328b0b1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-gudeg55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c812e288a26175968559e66bf4b5cafacf61470bbda99ae4cea5bfbb8f653d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kripik74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afad37b2c72b6dc40e4697866a2e90d084124b5c06d89e9b274d2871d16e08c2 The package bambang-kripik74-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in cindy-keraktelor86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331fa391e06e4793b16bacf8dc9ad44db2fb789c4ea41b75638616e228fcdf25 The package cindy-keraktelor86-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dian-miebogor16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6684f6396772172c03932a0e0643476f279c1c274feba8ef63cc37fb20a5acb2 The package dian-miebogor16-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-49908 Malicious code in bella-kue43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9c9dff2089fb7b2afa0dcf976c26c33930c7ed539cbc79fdd69c8c988b3188 The package bella-kue43-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...