MAL-2025-187039 Malicious code in foundation-await-pavo-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c032862fc81e78c2d89207df7e5c2e61ea1a07ef25158a271798bbb53ecb4610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188719 Malicious code in pipe-got-filament-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b64a0c0583f810c7bf936719ae9719767e9f1dfbc35d94dfc570626eb634fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fatuz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d8ec99be14c05ea1c0653ff73b2ab25734f8c9127d1cebee6897cb0e3bf6904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-joia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb9765ae2f261747fbb791aecd492b0070f76dfea56c04a7ef1a3c14407f5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-abafabbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc0daba15b11fd8295fe14565df4aed4b1720c38520b1c0acd1016d13ec44f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177512 Malicious code in poglymer-ognbamoah-agavsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e23df6c846965dadfd962fef37c9280a8ce83c9723fd33faa689c4bf03f43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176237 Malicious code in munufafai-sui-cagaffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab8f74e1d9d7f886e5d5141f6b32b3767823dc19839e887a47cefb107fe9a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jcyooy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022692b8bee18561599d2c09f44d7c5dbdf0a166952bdf66a12a90f25c663fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2acd489050f38f3d8aa7279c764a81b6f829450e6f08bd356c7142af93fdc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161604 Malicious code in nabuf-otoimban-igioama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280319849b73f701d15d50232318a9f3ed4d3f86d509fbc72cee1dbb28f7547c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04799e06ea2ca4aa7cd19ad274e930630f755dc6465e8592277b785d3805f54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecda597612b829d17979a923b9b4a456055ecf7a3edaa75536ea8ef6b95d8c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164702 Malicious code in rino-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78954586fe925ab7d43d485d254af5dc31373fed0ccddb464331cc697e123d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170317 Malicious code in verify-aiun-misiuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c884026ef46767d9d65c9df20b9e897cbd2a1a3ca2c624727812849c65b246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158407 Malicious code in lookingan-nakomi47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abc7a50043e3c2b0b6ca6c0090216dcc7751b02a1edfe8053ae3f8aa4cb945d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144418 Malicious code in link-ora-loglevel-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81750155f6317d515808884158c0219879bb3a01bfd1e4f522848f357c7a422e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135055 Malicious code in laila-brongkos28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ccf2b93c87cfada09615fdfaca8c537dc7f2cbdc5d52e325d1e05cd9b20aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kolak22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b14e758fd5a9dc3c4b2c9a94542ad6c085e370a97dbfc8f239cdbf0b1ccb2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134291 Malicious code in indah-kacang86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4992b3537f67690d7db5d1cf6ff62190773576c35e67fdd322a34f73ffa7af08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...