MAL-2025-178478 Malicious code in sahu-satug-infduitaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2b945b4be0530ad2607b294eba2fa6e6d8df51fd7ad1b0bf42b8078879a423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a5dde755a09a06d2ba9c2d55da2dbe9068e9b6921e96f9708f6e4c93f5f244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152091 Malicious code in aji-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe0c92514afb35fbd476a1bdb655e5d7cb53b154f425f379bb9737285fb6b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169318 Malicious code in trevora-kkiisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d552f573d1d2991c2e846f3f1705a3559d81b013a988d345d2e1e03c0f3451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-husky-semantic-ui-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3ccefa54c95c888bb821b615c7d1714b07731f815f4e005a557e282d65e25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125777 Malicious code in dewi-kripik21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b5503be6cf710b359179d0c9632798d998076021b331c6447d7bcf316264b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119476 Malicious code in dewi-rawon92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd563cd7d0e0d879fdcb410a136e4b40b46d3c6bf1286a732420388a7561b2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kolak27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45766105e6837e6e8cbff6e90b1e96d45dbaee4a5f154897bd07b4ac2daa69be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_snail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abab3efc3596ff4dd6fca3949f11e16cff408559f51b38103c33852838a46ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102623 Malicious code in fauzi-kue64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d3fbf191c271cfd13b4c95b08265b096e3b8cfdd1855878ef062020ce6b080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78909 Malicious code in impressed_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3685896e9224cc17b2484237bb204e69a02b9d80bba89718040311c9111bec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-fuchsia-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e81ffe42999a0a485ef53ca5bcac48b228f3df2d4a808156032e2a460b1e485d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66827 Malicious code in architectural-amaranth-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62480fdfa925dff42a2a5b406488472d697aa656d2fab4792c43ae2647a08691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3608c6cb90cff461c170d0e8da0cc6b7db66382c8af0548a1c90b0079b00b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sambel59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795cfcc9b7af6405cc3fbfde91672875eece8c6ecdbc5c6eb6546555ccfca565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-buburayam48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248b141069374da97f74f8b94f0a6ff9f5361ce8c1fc67a85e032cc39455fca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...