MAL-2025-167533 Malicious code in teagood-nalikoli123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4288e5598f9e5be66057c4f3e231f2323cc7d452f24c0bd0f8b399b030fbdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165877 Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162089 Malicious code in nokiragne-asaifhafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6006cbfb59c0425b6ffbf5c4b2ee78cf5f2a1bd7607584dc50a3d39122d3b507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-elektra-test-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54feba1b0ea2f5045f52f560727f715820fe005c0b44599e9e1078f5ea1108b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7169f32b6920c67feca4879bb9c15b8431f75f889719ff5864c3908dc64c8ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140119 Malicious code in bootstrap-rollup-figures-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc950508599104478cefa863ecb90a39d15f9b7095bafe4d9c802576eb00031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134488 Malicious code in iwan-pecel4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a21e1b4d4137843a2251274cfea916a81096984d2a627167823720a6a7e9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-naget72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c842da1edc3f5a6fe1c41bd220654384d1c40e2d087fe89bea17310623c9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-lumpur34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730474c4c28f930a6fbc2bc0c46b89c97fab06cc6b59064b5bcd1ca8e8afa722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134181 Malicious code in holy_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29cead5e4fca575c608197b380b55f0e4d13be7375af183b091a0a5a5734ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-rojak15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fd5dfbcef3f375d8302b0c45a2a078abd3317bb86fdb631e11fdf71b4d6ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129366 Malicious code in petite_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cfec6552108f9eb18c5d250b58bb67f2e8620e812e5551ac1bd9669ef516c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-soto66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb104e060dd86d07d37dc9fc8d0effb8330f01ce6e74aa897c14ce35b0d5e217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131019 Malicious code in vida-getuk65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2116a76361c261f4dd32274b42e4d244842539299de12d32c53737703b4d3b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130291 Malicious code in special_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74f8a5db86803872d38339bbbd8489d9c330960214357f143306286f75547be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fff30615237ef79b630706b6be4f27ebbe223a79045f0fb64ab83310ce28cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d8f79dfeeab9fcf71d3c95bf573ce450b962665e0ed18d3dc4139329141a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-klipo3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f388a25e36c5c92602fef7edbdf53ec5883977945e0913832b1cd35ecd48f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...