MAL-2025-189082 Malicious code in rate-limiter-chalk-miranda-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dbf12820a23efa6071dd559b66e1fce9c4821a398877a4c63e432d20b01f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-noid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012fab659aaf169e67f74221139216dfd3b8548ede8c49961bb00ae4285c0c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-afiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00056646eb491d40a9111c222ba824696906cb467ec5a57e8ea5b476fbfb0ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164662 Malicious code in rino-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a01864ac034202b556dc83ca45b43f890164f7f101de559a8d273ea44accb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tyuaddar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94216074f22f36e3b96686257e0fb301c2c0c6dd983a8f2cccd41c28833fae46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159289 Malicious code in man-nonatai-utgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd2aacc23909510bfc8fbc87fed7ee16bd08bc58711f0bf08a5fe6cda4cd483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulsmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68ab86ff69889bb7e5afabc28ec04a8bd7f031d490f0a79bf44c22e1f483125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-semantic-ui-mysql-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e57d11c4d7901d16ef26e405850611d2f59d8153b151f725245de49008bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-serabi16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11044a7ad0440495d86db266150a34cd2ec8f3e065bb615cc8e3e02b08a80a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-mangut54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a7e758a653c77c4a0ede76f06fc080b1b8a258a02bd0f8e404faf56e04d160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-bubur71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7780fced9bd68e907437b57c94796b2da33e90fbc02b08b0091a04a2fe73f2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-moci69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17ab4260f24ff776cfcb563857068c5b01a1532e9e7d98ccc493ad00c56084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112070 Malicious code in local_chicken_green-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f1684e4fc4ffc582163966f9f4a05e4ee42634fcc81a410559085e28f14ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98402 Malicious code in tender_amethyst_hamster-26-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe751e02c1f7835d321a7bb0efa565f1877429e7b10e34ea8c40369299d40fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-rendang54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b160b87274423ab2c1b68a0f6abf348bd5e491c0cfd44a0e168d1e5bb95da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92134 Malicious code in wawan-mie30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80301cffa67aba8422e68a1372eb9d915edbb63c7d67b93d0e3f94c1daa7ad4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservation_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df43b78a6db1e8fed661cd54b200dd65f2b45a697d48b949e19a0e5b8004fa0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82030 Malicious code in vera-gado-gado34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba9c38012c6cd28a90ccb6a4a49b9a48389f90bbc3d05f19de68a3053c3c643a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-serimuka73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac74172ad7983035002bdacc5d5b2f6bbd27849327aeae6ec2562abf05f1d4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above-aqua-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63562885ccfb44871ac01f2fd066d79ef8bcde486ebb67e514d806031d6fcd4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...