MAL-2025-189700 Malicious code in string-route-theta-virtualize-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f524d85f0a7b09046d1a72ea16b5cc85abad3d62c1dd280310cc3d9a4917907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ruwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e399e0545c0d5f006d489ae19ef731633582db1198002ef614f653926b927b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155860 Malicious code in ibanun-ota-umumauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef929287bcedaf4a4ee4298a41bb6573985a3114c073d21ec39d130f07b965d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170094 Malicious code in upa-lubalauvalio-ilualsgdfsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e75f1a91d1cc1c9ffb941f3c458c9798808158b9d8b156f1e981bf2675c86c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-process-alphard-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2909c41dac1a109495cf0ea2e8cb4d523c9f422cf2ee0ae5cd922904f1122860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-acamar-charon-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c9be43fdc513003e60ad4426881dc8b83d6aed4cf66c109c9073059edd2499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124654 Malicious code in zaki-kemplang11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adbd21e56e798cbc4a8f92290636dc99ceecc0a5331c6794308b2c2ab20f36e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115621 Malicious code in lutfi-sate64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d134c892e85cc9abac1ce4634a24739a339f91cba8df4dbb397ca197f1383c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105659 Malicious code in mathematical_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e060ba15786d7c337fd5b0afe3fdf11548132a8201bca19aa9c3ed5750c043d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98235 Malicious code in patria-empal64-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c436eda719bd9fcdd3fb0b877deac4b46aaaf5c648269bb8b4ec871b5b865918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5958b1b2856247e362aa9af881ce72fec121734e2d0e9b1e448e2a155a6fb2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96362 Malicious code in ridiculous_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d12a2543b6396f4662842e2a371c1e007d57034dc5c96fcc55ed1251495abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79683 Malicious code in liquid_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0898b1c5286e43c200eb9121ce008fbc4b656eb3e173006c0f8a7b1d2a77c688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kripik40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d67c6393c3b4b37461a783cb8018f11e757ef7900dbb11791d6c447da20b57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69620 Malicious code in noble-beige-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def5b3c032139e1813f635442c301afa3e46f9f00e658988a770edc1e5e94b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b498103016176c142f9e9f9561d7cd2725042687b79912dc0e39680e801b932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56934 Malicious code in iwan-mieayam54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d078f3b05a627f5a587f53d2351a55c100290306f61f9a5d3a786c6987b4201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-klentik92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c75e87c18a602cb701aeaba2a4508cd634b61c5339875350f3f8c1f6770163c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...