MAL-2025-162358 Malicious code in nokire-arhani45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecda597612b829d17979a923b9b4a456055ecf7a3edaa75536ea8ef6b95d8c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139514 Malicious code in apollo-halley-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398cbf2aed0a021ce9867d71a7b7748b8c94de42d368fbefa3c2b94326010a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-ini-helios-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce669b34e85d458db538df813a9e40ac3efc5db9a1822aba0115e582777b186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149561 Malicious code in wolf-sadr-venus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5820b02f0067ae5b03cd0c76651fda8b7b47018dcf73f12959a8d003d8a8622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148595 Malicious code in testcafe-husky-betelgeuse-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957ecffbde3904975384617f7e5b76e87599dff9c6d45add620b7b057910f3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139983 Malicious code in betelgeuse-hapi-dynamo-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a35da202899a19f4d2770c7c1cd9956c0a0b82316c6be52a6712a1fbfb1568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-beige-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076b5851dacf23aa7952819d3faba5c101e042512f09bd607d2e86d9502b15d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2e3a06f2ac94ad01974eb30aa17a11509ebc2085cee8cae5e776537dab513e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134757 Malicious code in joni-sambel57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f460a317e2547c1f3f7bf8cf5d3a63352f73723b5b3346f5e2269e40ba5c164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134629 Malicious code in joko-kupat65-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35936db8df1f1a10ba917130a5e125e4cca2666d408586eb345ad1be706dbb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133611 Malicious code in fundamental_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce4b3c14679aa7753a222e2d7b420081c35680caedc69b83e0808b01d78770b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133780 Malicious code in gita-ikan1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a8cd669a4f7d4a158f3261347bdc8538f20df964b17e8781e37138336117d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-dradag97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67dd04293ca82bfae543c9008f1b89b3484c02cadd6a47301579b24c924886b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130354 Malicious code in subjective_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba58932a49d303c9d3b1aa3f1af077c5659cc594bcfde78e2776600cf00f3ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef31c78684c8daf876f5cdb77cf29b7fae56c3c293db93cf062ad6941c3b2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-lapis59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140e804ece43a3dd427f13e3a594af706f5ed1a12299b2eac6c3fd34a100ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122490 Malicious code in patria-semur86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cfef157b9f178ce61cdb175a58390a462a9371af99d43649fe62d16e3f0ebee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121577 Malicious code in little_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07656d0894a47b7f57d61f7ed871954edb5003b3255c9b882831823769545bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b923a63a14c600312eece03dfa8bd0ae67e53375764ead2c878c8c6fdecf383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kue85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90f780d19b8670e4ff08d82a10f67d47d600533c86deb8e32ceba5a1c6d5870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...