MAL-2025-123276 Malicious code in siska-ketan1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c1557106654280cac78aae883f1e39c0b570b4c6a386ebcb9b08ffc7b6a47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106055 Malicious code in mussgdhroom-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5821da305ba2ec9dd9874b134f1403909431416a9d76372e871f9384571da175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crucial_gull_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a20baedecfdae08b488c3ce5eda4317e30e2a809e1b8d3c9961090d4f432a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-miebogor41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c1757a1f923f3e27cc7c7a97205c85562eb7b0e16b8f49caed0b5b8ef4b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-nasipecel70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0667ad962602c69cdcaf73941610aefd1c0d5946ac17a1040bd761b83d6e2046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-gulai46-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4431e96642ea6acd19c98adac331324a8f5f5bd0e3c468170c4774c924593aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92945 Malicious code in zeroth_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58035d0cf71da349ef82850b11bee954b152628025f2ec5eda91ab76bbf8fe80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91926 Malicious code in vina-oncom27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80d7481bf72153ff59bf3fe77ebbc7a841c3e5e3dac1fed9880f9d85cd2df77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-sambel69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad3fe7db5ea5a956301d0f4603664d7e4375fdbe31c045be748b9fb854c1c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-ragi12-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fea53135555a7a386b86b11feb1830fe1edc61ff5fbea6b352fdb03e2e406a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kue81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c5120d233847a67139e1b6a94bbeabfd7622c10d746bf281421f118a37143b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-lapis18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716ef652187e6bc1652336abfc876b966c00fd8ec70ef3659279c4a1a52c37ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264a34969c2b4a11e3e4b8e675408579ca6daa82af63451ef2ef200d544a7047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-klipo15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892513de5bd7ca7b54b4349ccd23a02e7ffae948103a5ba835fcb58a5e14e16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...