MAL-2025-186596 Malicious code in docusaurus-mdx-ionosphere-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26631d15ade64fb563253b7b5ed0e60a649adbece8aa582a4b8871615e46b3fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184401 Malicious code in modiov-kihon-afbaufcaducgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a7a1481a6230d38f147bcb924a458f39e28950f0b4e424d5fa319d9965c26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56defc26da6b41423eadaf8aafbb6f5ae4c4e231434d3bf61e89b46879522cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178374 Malicious code in sahnim-satafi-anjifgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cf490372235c2d670f481d63a58780b708b0a1a6f1cb29ac4dc462ddc33a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172591 Malicious code in verts-otimo-nagigofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a4384785bf87c6d8487771f08bd638b1ba700cc0b432f27ac4011d3719e055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gabrielsilva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeff4311346c16b41c23d7865a281a0e765123b416e9f485db2bccac38e6987c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sariputri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f539e6b96219ca80a488f46b305555f1755f26ec8a07ab226ddb14dc734d489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abia-avugi-agni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7571c21562f5cae048373ce20dfd3abc7c8e082c75215c871a4758ff47f905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-rigel-nodemon-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b245c5bad420fe8b658ba8fc96bf22f6279e86661f42a4edfcb8cf101ad1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132016 Malicious code in andi-gado-gado25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e487d443e1f62126eb260248b5108f78ce5746945627f09f3118c62deb2545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kemplang46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac1a1a3de83ca2c9e31d13be2b550167f8873e85d3b3230aa9b8f2d5dedd511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-saguer84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9865eaf752d92825a9c18751345b136e97ff854760d49e0758774c89653bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99235 Malicious code in aggregate_bug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd69aab0eb62c05c6239427dae0506c725f998d34ebe807ad69d476ece415bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teenage_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12caeb63057d90e0225c4ef88c9fdb2a548f1d84038050f26974eee1dc8d24c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107099 Malicious code in planned_whitefish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65c54d1b670f9d5a0799c1ac625d7cdb20b77dfd7de4ea5e2fa6eb48448d933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-asinan43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f4e48359822b245d8a5d9eb907b1f3ba1f7e18352322b6e9e84c24b7c4c45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-tomat58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b8dabf1ab9dc28da92e773089b4f367dcddd2bdad95ca945f1c0bc7b28d2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93321 Malicious code in awake_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fba9754505f353e9819f5a7665b2ea181a813b6684c1d664cb008232ef24a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54863 Malicious code in sinta-lengko12-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693eedbc2bcdf8f5dd506efd145c3cb6d3a2730e2ad887e2c6aa3714c03fc54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...