MAL-2025-162051 Malicious code in neda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5478a07a5e3317b9c2e1e70402bc0d5a46d502e61f605be5b5d10ad0a2a7dadd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154887 Malicious code in fadila-poke151 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1e863812009a74e9569d88f4581d56514644211eb4abf7428c36ad711a78f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcd36820c08cfe1a381ac49083be86800eebaf2961f9fc2f26635a78eadd802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabamkuloloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ff55344787ac077f8758ceace865a2ad795d3fe619ae35ba7a6f7ae7f3bff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150216 Malicious code in @mipta1/sauspf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a12ff3af3595843730297a60647948f1ebb849abaae9f7250ff40b49f2ae38a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167445 Malicious code in teagood-nalikami45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9c1489b984f246612a3e213100b430bddc6f1172af0fa3f8f16e41d292b796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-mysql-cosmiconfig-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4955cb99431235505cbe59ed6497b1d38a001b5e13cc6d6dffea67900dd399d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-dotenv-kaus-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3856e69c322fd1f43ff6ac9660aca2e5056a14012ddc90cf50c570f3c1c47890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-nconf-venus-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e5556fc093097aa6272507a5812f1ff17fd79e8a6ba105a158af368ca74876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139250 Malicious code in airbnb-centaurus-command-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb684e5f5d227b205b2a9cc827bc42da961dca574ec34bd8e32405d67c4ca1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-andromeda-dynamo-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80fafa957c409431d7baec947f5b7a52ca014b0b98bea2e7699e82dca0be314a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146120 Malicious code in perseus-test-transport-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdfa3a9f4d9f66229aa398e020f28ed2b8db7845692c0dd94805a1cc841b4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b25b2db06adea8332740dd3205556375e1a92751cb64a659cd7ab8511567707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1164fd97ffca01c0ad315eed47fcd56cbb7ae79337a30fdea4b958f27e90a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137331 Malicious code in tiara-wajit28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d376a752bddbc6c183e34b074758465f8e36f80827c124dd3e64e774341a1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-gulai90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2bddb34d7ddeccce24251296d3e698a91e0e91e330b1e01fd518eb82dd005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133196 Malicious code in erwin-gulai32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c1d8b589ee43a259a549eeecba8fe067940ec11e72224f7c16f5e1c1d04f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-lepet17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec345f8eb9d99fe566f83571c2a7d1872b059ef3a575cd95ce23cc70c7d3f84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edba834c6f6c7a2e98fb85f9958b1d89b407ae7a3b3e1867e218a063524794e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-bakwan14-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bf55c06dd9b04ed2c709bdba9809972b01259d962443733eb30e395e953700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...