MAL-2025-171658 Malicious code in ninakusuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04a95ce391ba9120764198008df7e6433fe56f2d334c87ed016486c3131e103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156276 Malicious code in ilop-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c7b0d229753fe340bf1996cd6ff285fb2feb7e3ab86fe52b719f199bdae05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe19b42dee89c876b8d299f6694aafda05151f80e1f085389221e508f1aadfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc09701127c318e88b09100a2c7e4af648c20bbaf2eb9183b7fac09a499287cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauof-dofafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4148722f96580d82bd4be17af904c5fb03cd2529efd4891fc277adce86e822e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564672939bf7cc87655d75421a1a40b6efc5c9d1d16cfdbc53fec2f176760afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73116ca0da86a13741712d21b904a301b3714a28d6b57d85750828da655b7cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manuta-mantap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f20521cbceb786757794155840858514e87fdf4a40b80e9d5139267ccef2372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4cefbe1dba166156c538b31b477276bb5faa15a5d510db5d60ca679a7260fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157711 Malicious code in kuinsu-lki-kopanaiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd2ac60ae01ba287554c96f8274350325c4cdb518f289287f1eae392096651c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-pulsar-google-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6c861bd6e9c076a17982609b8089b529c3b1811d9a9c3830b0c0b2bd92d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141314 Malicious code in css-loader-relay-element-ui-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3a2b6b8eb1dcee62835621683bfa4bac6dc855bdb77725f0cb058fccaf4ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-centauri-europa-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf6a2a4415d58b5c60093c25d385b84511272149ac38e3a8500e2be1907eb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139430 Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141693 Malicious code in dorado-module-centauri-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc48c5da0d6de22d1a878291edfa6b66e1ba73e9a36bab77ba8939963d3e8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ce57605fa55e0e0b41f5c70af1494ea324e3c4b07e22d5bc4395adf36d81b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-serimuka43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae5d2c79edb9f8ce0b21d1b958942f8c8c01626432f40fa51e36e2168a2bd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-tahutek72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85cffe4e6c51c735b78ef09d634844f06e94a54291d20d676f442573c154c90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132879 Malicious code in dono-esdoger24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49019c3f27ecc024c955db6cc09bc7a7c173ec863df000265f2e71ddf9bc77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sambel100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f52bc832617e8d8b791f3ea64f19a55cadd534a4796b96d636a90ed7a4c678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...