MAL-2025-182419 Malicious code in imodiov-kufni-acumnacffgteafgrcavefac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665557ed3df870a0ff5a8093513390c22744013d5ecb152637ac5a7d786d9c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156881 Malicious code in iqbal-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcaf6c2639a3d7c73d3c0ae8b7b82049c55ead4df4ac0e75ecf8a255496e06b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169835 Malicious code in uinsu-lisa-atukbmunima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fdbb37f426dd76b749ba5e9b5c3aca5720de5951087a82d9bc6ef75c8403a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-nova-postcss-loader-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5765b3cd7467d3c41b9103ad6f93095dd6ed53063d697d28fa32e74012875051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-ketan24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2b805fdb54291d7b3c4eed588b2bb75829abcaa7b7b767da63de4641eaac88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcc4030942767c1d9461d7e486565d50df6e0da99c459577a899028ae6ef0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122189 Malicious code in obvious_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d030ab69a21e472defd7e7c73d890fac4ffdfeb1e3060e13b119b3836343eadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5efc575e75600a1c2e263113fdb94bd9a4a94b3bfee7fe28a4ea5f8200ddf80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-ongol-ongol29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a573277927aeb13dc36d8457da128e9d6522e98b572bdaa5529c25c0d860993e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61976f08d604eedfb50f1b25c2567f8774c6b8078fbcd2f9c847050ea9fdb4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-semur63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18938574936251f71e7c20214b5256bca212a147f42c0f54d7020df369ef13ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98965 Malicious code in tiny_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f8c59ba874001b47c8fe6676a66818dca6ad1a73f7266d5303f15cc6f5c752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98803 Malicious code in mammoth_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc9b6f8bc1694191efd6c10ea20af1ff18a8b537596e54bd82d80d7226af1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-getuk99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377829b63b8324a1b4eec0049824780c13a120fdf99ab54301068c3ba5e6eca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69469 Malicious code in molecular-jade-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f5436e2e1ac7530de2199d8e773808e6e697b4c24350916fa155a99451bb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sroto90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efd91c99028bedf606e34fd37b244767af3635055dc31d7f911e73c5ba9a112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...