MAL-2025-174363 Malicious code in goodafin-nuig-giyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efed51db6f5cee5df4ecfc594f55584cf2d82f2f48f46054cead52edc1f1f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177626 Malicious code in polymer-afaj-ratfaaavdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62cbde60da3521c0e1275f59c87978bc8ca9deaa1acb8220ea4058621679ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renatama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8f54c10c37cd5186825ccdd94e121015c3fde12b57253fbc739f971d6ae804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149963 Malicious code in @mipta1/asssesx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ea3a5d8f140497614b3ff4b207bc8db7f7fd3d155337d17cd9a951d9ca3f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159771 Malicious code in mansila-taila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b8f24d989798f4fbd9ced8182b0ce214ddcb3bd1ffb38d5fff182f3b93ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164399 Malicious code in polymedarnan-nufati-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e03627cbd17ad580c44ab82c563b41928d6953f0238cf4d6ae1b67e98df80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163351 Malicious code in nokire-rara60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e96a07178b68cb5e02b9fd4b4a32afddbe5d39fc28a747bdea8f102f9309190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1353d4be9b7832bb1bddd7deabe99168e5ee01323e47f532e07a0175c5a951cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-gommia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd99ec80f0ae44d095aaa663fd15ae8ebbc9c8357bfb2b4f94c14c0bf3c540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nioybanali-lauyubasukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ae39672323b421c3f6c4f4b4b89bfdb5a40acc8668b10c55e8f22c41acd326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-dotenv-draco-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9b2da508ce5e3cd0f2e4e939e92d8107d8b398972b460a825cdeabd47542ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427e7143da6bb276367048b0c5b5503a017feeaf6621d126c4520ebf2085c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138706 Malicious code in experimental-brown-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fac05da3d5f7512833d79e12744e38792a030aff6268ca10e53609bbc3197b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-ongol-ongol46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0c1ad8ccbb63cc59bd20b40d84a49fd4eb10fd119b9a9f1b02ffa38e4e830e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-mendoan39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cbe62278eba2511fd76ef42e736547ce690838bd732dcb96dbb71f6f4167bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d034504a1ae5a8c77703ed0def18ab3bfec736535d844a369c1b402f9d03700d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kembang32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca9752cabc126d4ed76f7e9ce63cc3406d62b58a60e7626256249d51b07c991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da541eba992d22ef2021a1032db2ccce6cfb05ac78bc8fa458f8b22dbb9ad51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118424 Malicious code in zaki-ikan18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2965912b0d6e2ef3f22bff193a59ce4b3d4c32b3c1e6317541f342c17ea4309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114543 Malicious code in hanafi-oncom21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cec336bafbd24109c1546c3cd2d192f032dbe34034691904a15b32ddfcb802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...