MAL-2025-150299 Malicious code in @mipta1/usir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b4b7332b1c567fbb372249e311f6850b91e1a679e62c0530e49f00ea0b3a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157326 Malicious code in kamasada-nusata-bujsdab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d79e920a11e9843462335d2bd6a8016d17c7fb7c5f66f515bc1770197916e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40987c53b028e5193eb2ab0eabb9da4ed6590685a1bd511cc319230216ee751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-reveal-md-antares-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc48de705e14b0fc19c38e6070047b60ded65999d88f313efbde52229f4b8df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139571 Malicious code in arcturus-jabbah-private-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b8043e59a6d62401783728f39ae721c11121e22aee1c7fe10a37851fb697d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-indus-dorado-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a17dc8f5d81cfa2b8edd8af68bb6cdf3b343708ca41af221bcbd1b9173508e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142519 Malicious code in firebase-webpack-semantic-release-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30c4a5f5b373e1253fbc5568dde92c8b9d95968be5db1fc0c7cd27e209803af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-radiant-cypress-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178bfda625ae6afb0496687a9c92e24aae195151c40703d0a50c6408ee55d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-rojak29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18c9b1bcfd3fc37c4d611854b2ff6748d9e011206fcc89739c9c9edce6a9e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135804 Malicious code in nina-ketoprak86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9c1c11deb6d256c3418aa029a94c2a7e615a05e965b8cd45dad67856bb9807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135268 Malicious code in literary_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3313743cf740e5f5971bf2747a77d580f57c00446ad219ea3faf117a618b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df19bb99f2207ad77136d85fe5788211a4886e8e89167dc21bc4aa68b3b62a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125647 Malicious code in crude_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7000f58a22de04987ff9a35b7340b4bf49c6d59bc2b276496964e1bfd3f84b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d8c9415f16c7dc8e39fc285aad67f1ff2d1a7156f634a72a9a715e7ed082fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-donat42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03bc78c7c61bd68d4d369e031f019ee96081bc7e8bb1b71deb288b63c809730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124468 Malicious code in yanti-lumpur70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef55ebc1be4f19b7a85bbb966dd7269597f4d520dbb091c35c3661664ad02c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121894 Malicious code in mulyono-gudeg60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a4b532d099c709ca1e4d15f799e246df7bae8c7c84d7e72487a6c5a006f138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-soto30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a757582565ac4c0abdb568d68b46876443c8d1ccdcc29fcfd434be14bddc8f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112436 Malicious code in uptight_bug_purple-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfe3a4cdb05d59555f0de6cddfd051ea7e8c5cd8a4376c1e0a4a094d88e6540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112348 Malicious code in spotless_bass_pink-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f14a60ca9da66b52c180add195106c88c86a95522776319da15f36d67fc32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...