MAL-2025-189292 Malicious code in run-script-sagitta-pulsar-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301093ba1f19945b67f4a51c33b12c18edddc6ceb26f3c8bcb80daa80505b50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186715 Malicious code in element-ui-nconf-oauth-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fb80ab7cb345deae95e9acd799044d7c7a2e26647d6c158c687da329783e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d01026a56bc96c79191a91773f5ce426dcb736924b05ce89ec43f48c574056aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159151 Malicious code in makaia-ania-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb04c589a274ed4d74dcddd750cc10bfa6da863214805db22c0bd33ef89af73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155106 Malicious code in fitra-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df947081b09ad96731df3bc4bb5e41b4e1f89167f3ba4889f4b7eaf0bfca7ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140586 Malicious code in chai-chalk-procyon-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e028459fb96e99934f5ed8686ef1b3f1f0a5844dcb39718e08d7eb38dec8e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133716 Malicious code in gilang-mangga51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee531b01a345bd8ed1ef9600db881b409818e86f76091f5d60794959667eded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132074 Malicious code in apparent_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3151a1e2efbcd2b1083000606438626e916fef6c77290e0d27bc37f4ab8eb631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125735 Malicious code in dewanto-lupis4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06cada88dd9a61351ac90ef26df0b1f6db41a9263eb51910d7b07d72203451c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129289 Malicious code in pale_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da25ffed5a01e4f211ded4d18eb7c1c1a0a058c4b18fd3e91a560a874a5939f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124132 Malicious code in visible_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4ae9d0fc9b2e8ab307f14299cb472c552cc05422a6014059778a2df086d9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0990ffaf7280b999ec31464454c16425660bc8ca4fbb9ad3292899384747023f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120539 Malicious code in hanafi-otak-otak66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39796329bbb352a8964cd6765251f6bff37c5b146e09a9402d99341d8006a99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-takokak29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79ae07d42225d7b5daeb6c6256fd6808783954036f7c8319318f1a46fe09d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95643 Malicious code in new_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e5546deb57fd3ad8109d0f9edaa28ac622f8e1001958afb72b3132debc8d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-dodol25-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab579b3059f65257a4f71537f26962d4b3bf5d82f45fd0f932867c4f25be7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7df2918f99a94c6fe556a29d5a4fcd59d1dc1875e1317d937b8ca2f5248d019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82118 Malicious code in vida-mieaceh68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79af01557474f3ac8322003bd88dff1a72225ee6bb2fd356aaf69909fd4eaf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68026 Malicious code in enchanting-turquoise-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234689944a502e4eb3cf26411ab53ac99f308dec1f3514248a40c224dddd3164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69475 Malicious code in monetary-jade-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af75f2f4fe3b4848595747b0fd09c80855a2d9922ba00cf8fc177efb5a1cb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...