MAL-2025-157686 Malicious code in kuinsnu-lki-kagbdsasodgasdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8da0576747a56fad39d11a1fee09b2429ba28517a9d87f6e6194e60b368158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f2ff5376d7b6a97cf1a07f9ccd50df3690d35d92133da15af7b6d83fdccc1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab99ca6708d6e2a22138fda91092895b8f85f4198e38b2aaa9226d1462c5fed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c462033a7760cfbf064e512ad5ed1eb43be9567a5ee9a5d63f6041ead8daa37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154103 Malicious code in cinta-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d520d33b9e443c826680d3fc161b6e48532301ac0b658723be5435a4b47d94d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-dotenv-safe-xanthus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57975ca82a0703ba75f441ffa6b0399f3aa145383caba60cdab563bbf3341e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139708 Malicious code in aurora-publish-markdown-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c37dc5bc5d8fcb554dbf6f064affdc92e9b34a5aeca6ceebbeee20d52be0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146188 Malicious code in phoebe-wolf-ceres-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed97b6ad1f4394f2f2fb590260d9b665d49322e8448ea75d7cb49a81d052790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133039 Malicious code in eko-lupis52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f06a66a4bd6321b03613b56a9e6e7a27cebc28c183fcc639063c5346545513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lupis90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd283444455edcb0757c7d204fcd8d7812fc06d39d94e6d9fec3d36088c10fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acff69fc7391fb514244054dba14c5592c76d883c3353d047da0f77eda0c9369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advanced_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073edeff916e5df99fe8257f55914c7d2b1643763b9e5d9aca9e24c8197db460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-lutis7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9338dfde8811f550ddc29caa94bed3f3009a37c03b303dc78899004d2f109fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gulai84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9151ca515065378b5b0ef0ce7a2b23cfb16ef9ca0cf9d1344717843881adc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117297 Malicious code in surya-rawon21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e85d04f06595cba154eb27edd269c9017271a23090775bbaa07fa5f4b07d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105986 Malicious code in motionless_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a46b4234ffff7bf21647a295f0c2646dbdad5b833a58e305ddb949f5455eab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104372 Malicious code in involved_jaguar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb19b81f52ef9455f4dc8d9170a49ea9dc571bd8d08f1b5b4b2ce4aa691aa521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-dodol74-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaf53cc42a0af2a80950a464042b6ac15b73786d9306953301a7f5f896f469a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03eb49d96a4aeb1fd746c641ea5f338208f225d9faef0ba75f9c82e46877f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95515 Malicious code in mixed_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c071d0a3a46647a66ab1aa4b71023744f0b386bfa5d425fc2705c17c8638ae6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...