MAL-2025-179399 Malicious code in zaskia-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b17ab48f57d0c1b8031d0cfd8524492cf2e06ae5d5a894904d764f5464dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151041 Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-jovian-yakutsk-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942daf1809f1a933ec556875072240b54cce259a5cafdd8782ecc48976749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-commitlint-config-angular-local-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775a7f4647dff721bd84bdacec512c06260983b010f7d71d71eec33faeddd25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142812 Malicious code in ganymede-nebula-jovian-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab0372c295d479ca8229b517377f430fe5a00cb32fa1dda73d850415e224c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-tahutek7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ceec550527ba9eaa6bbee77c363f6c8ef1a1db536d67545a84bc8f3c62c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lapis54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f431730610dc75319703d1e709f11a321f75841047012c29e538c3ab81e9d5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-empal36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f3926c52cfcbe1dcd7ca5537ab216674865e3a7ee16c9a41bb3205f89bbb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc95e016bbbcdeacb8e6dfb5be351c5668901a99b516cdb6cb095ef47f70c92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116034 Malicious code in nina-nasiuduk24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e4f32bd1b67f22f4260203e79b7b82a47836003477bdddd1a5263f2157c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_carp_coral-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931a2a9824d3b75c21e49930460c954baebafcfb54f41c20aa4ab09166edb49b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101640 Malicious code in distant_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafb5d5c8000eda227efa8af7d88cca54a636e9acfedf3bebc27c20bde2194e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange_squirrel_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813ac586e76f1ca963d4076681069038ed2e2110129336ba18d52a9e92b63413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97125 Malicious code in unexpected_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01faa841de8f255f04316f94102f065017e31bdad4fd9fcfab272a5bf9a27df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kue19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee76709640adf7034640e56d959cd2afba11f6959fe322a030d6f095193f5e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83892 Malicious code in cheap_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e99981eedfeeb6f5ecf2b2d1b21284f23f1c06bb4a904e60a6419fd3a7c460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77244 Malicious code in cici-martabak100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e3f3873b5cbf16f5a499a0cc263413ed65e0683637d19eca4d04f80130d6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...