MAL-2025-185432 Malicious code in alpha-deserialize-book-upsilon-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5a39be23ad3b4541742c950750bed375767d1cb58d4a9ace32946e02687e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182455 Malicious code in imodiov-kufni-coc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 231e70af6270496b10470f3c372cf0d86cb52e5626a1a5093d62e59ace831751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba366add2dc20edb1d22dc16cc3c159839e222ec286584cfb21975c49e30cfd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3073d82d31ff6b2a7e2f0bc558d7723650837041229fe0ca8f8fc468e03dd090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144086 Malicious code in jwt-spectron-global-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19c70db984d25aa49a8e055559447580b2522c142759cf4f72573777240e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137783 Malicious code in vida-ragi74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebf98bc271b4716281d1dc06bbaed490040694a8c931a0ad00afe87ce7041d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130742 Malicious code in udin-klentik56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d2b747d1c4ab1259cd84968ef66874aa24e3edf2ebd90274ec260f05f425e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-peyek57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37612bfbd8083d27a532d23d5f6bdc97c0e86cf5f2a86af9c84a41a7c105022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coming_possum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4366498e57beca3d73510bbbb01d00007b15ac1383952a7021eda4ee5c75158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_goldfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9553f65c72d2812a3a4991107fe29b633dfcc074f9b80ed9aa8ab72f7b0f481d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-miemee98-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427d80ad6992a4ffdcb26b3a523d57b419c6950df626ba1fd2c110fb8f1e0337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sate87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa59b4a4da980fa49cd66f4528b43aa5d20ac60430f504126567bf994bc8868a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88422 Malicious code in metropolitan_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17e4622ad1d2b6babad74e4eac8dc6ef49845c87805221e30801cc07d7805bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-mie45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2796bc0e20afbe6e6492d2caa8cd0cda4e1df7249b3c36e4a6b4b35132774f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lengko6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c6562624f8760302fdc4d20900d451864c356c66424c87b1db8cca19ee9985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59377 Malicious code in wasteful_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c2d5d1ca0df10aa442a40f20cecc7ddf4d62f322e3025dfcc8f3b1ddc583d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49791 Malicious code in andi-sambel69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf2c19bedd1c29bb052eef1b983076485597c1f831a4c1c8988af6b60f5301b The package andi-sambel69-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51163 Malicious code in budi-takokak34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91943a4afc74a7ceeb900fca1a0a1783ceeff510053dbbcf86d8027aacb66bfe The package budi-takokak34-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...