MAL-2025-186887 Malicious code in exec-local-mongoose-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b872afd1ac291d4ad9a6557070b1a111c63c386c84d16d9637c174bb6e04f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00e777f17a13148285f52dada784c5ea4baa150304cf219ef54142d511c9683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idulaisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5120063417d75f7685024f4b5723691e09a87a115228feef73fb6c691f091d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-hfsips-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5658cb45855c80cc0575a835c6a8c44d0097b5ec4ce2aa6bbdd879b42aedbdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b031a2b28e4a1eaad8d03bbb7e0d2515257d88e4bf4a481c2ef5c758714cf9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162126 Malicious code in nokire-abimanyu15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9adc6e79c0b75edb5bff13a450c45a51939695835cf2b7e82977f2679e74d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164838 Malicious code in rinto-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a97fc75184ea0883a91efbd8ee8ae8b5fc98ef41293b1888a08c6d3d5e07e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-protractor-nightmare-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b9e415757c6071f6593050f97c59f34e49f7c658690288d860be19b3ca16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140885 Malicious code in comet-parcel-perseus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0ffe22d6274e2d68cbd8b7e0137a7cec73c28d054414aef976087863d26de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132647 Malicious code in crooked_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b090f7570e5993e21a480e94935b6c811043015a6b4f5c906ba51117f4fc4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-getuk68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43b576e79986f813755ae363a21828277952a3063ef601a305e085de3237c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123296 Malicious code in siska-mieayam56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f61f58713698913245c2753d03ef9042071d423c60156e7849b62531a61460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101417 Malicious code in dewanto-empal60-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f82adf2022a6edcca8f80bec056f309abe8b4c022ed55294f7d6045e18c592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-mieaceh6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d259be99ba21dd72f589c92d050e5c1df88e748106214306d4d3898fa199c3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82362 Malicious code in wibowo-mieayam23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfa554b766140acd9aaf70ba6cbab870517458b69a405afa683917d69def7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67905 Malicious code in dutch-aquamarine-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b92e3adc6dd708c2c810057869f50f82486f77dfb0bc5f5cf8f6a97305cf836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...