MAL-2025-180043 Malicious code in teate-thy-py-bokli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff605f5a976161d3538c3a3e5de4e4607f6e6ca57ffd2e25bf4a183f4b8040a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173363 Malicious code in buta-fana-sadofagana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee1283f0267e0f9dd942d79f6227910efad0f8fb9825b8aa29a04625b8847cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154473 Malicious code in diago-kulio-luokafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263f78d68ba991998b5c9554ae1f6c9f6b1d8136bc883c5c47aba4b5c201cf1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158517 Malicious code in lookingan-namakiki10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a8350ddfa79755cd1d058e02ed211e3bd06d563182738b55b8b570b1de54fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163407 Malicious code in nokire-sekiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e54cde46a7f32f323e5a02d48b29eac36fae684b94ad658c0a96cff9174b2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142663 Malicious code in fornax-winston-browserify-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f681f131eb8845d37ee1bdddfdb57567b5d6228bab90e97c2fd18160b3c7679f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130347 Malicious code in structural_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba705c256915ed5bbbd337710009175595dd3c168fdc8c19c431a106d42f432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-rangi70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4b39b4529c3df91294e0e490d48bd9f11db1f52ac83b51326ae5fbb2bffba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-gaplek50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f532908690532149415fc720b5359846c6fa98ca670a0243090a1d57dcafa60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129862 Malicious code in rifqi-tahu17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36569c29d77db40aa23da5b1d26bdba3611e13cf7c736d1df0e7eac5ea1544c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128279 Malicious code in lisa-keripik92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692f1c36f3e7f8b816ee9b4352153e54a341e8e3d19d07dec8d3407ece94a407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104586 Malicious code in joko-gaplek40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12254ca5581ce81bf9c61f3859de9fb4903f98dc62263df94c19797199b5fa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-telurtahu12-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9852e0089f5bf04363f114fc73843f69e5d90064f001372f8a2e383954672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-ronde58-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f3156ee703683f7fa8d003c636ac6650e10e08a1c7fc10968316fa4346841a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79761 Malicious code in lutfi-esdoger92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fb5da43fc661df4d66e2cb9994d8ea05bf9069879ac99f544610ad7493db3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83419a39bc064dbb94ba9ff47d080248d76b2a3d5762abe9bf9465fc8d788e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing-gold-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb7b0345cc33889923925692a77ab6426b9f306c5e8e66bf8da37e7f418eb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52663 Malicious code in vina-nasisayur64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f4cacebc9be88b5326c928a18f98ae899e7da3999ea9bbd70f579d22922401 The package vina-nasisayur64-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...