MAL-2025-185315 Malicious code in tunis-kt-gahuvfaduf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95cf3bafbd345c109b58f8cb2289a60ff31d69383df116e6b5747f356d147a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176356 Malicious code in nokire-kushina34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9601ac63060f271a5b8ea5c8f8e56ad9642aa81fcacb4d7abd9e9ed96524d34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172330 Malicious code in auis-lepod-nutsddayiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000a2447faf6ee6776a81c985c7534e7b43e7524e63327931ff2128c1afb813d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luki-nasunnabaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf1c6bb742ca0295428f98c54076f64d4d45ef45472257ae701dc8babcf2155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/g1enser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8e70ec97cdd87901f00bbd520bbc4ddb7952061a7ef4d1bb625992148e443d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fjgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b23cb3ecaa5afbbce6cf47869bebaba495a8591cf01b6c51f24e1ec7348edc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152836 Malicious code in aril-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d2d5a73a8171def99f0f9c56ac08dac121616aae0d395c27eba8ab0926c527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162005 Malicious code in nasution-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b71a3ddaa5741c259ae312efc7834349ffba42abc5c177376d071822855c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166922 Malicious code in teagood-lokika56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b7e1528cf7b771c91340bb92c5ed473d07770d1ebfa3e6b73a086b73f64104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143708 Malicious code in io-version-spinner-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcca631af9bd1225bc2295e4972bb17157ec73006cf5109fdfcbc42aad6da17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ed4f49dc48ef167cb7899bd61587628122c3dfde9e340600c8001476089d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138508 Malicious code in zaki-tumis82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f346cffb61355cc9cf98bf0363c20175d0d8d123ce395dc43f47eef54bc289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514e6d4a29e5dffece18f2253291478f7e3926a2cf9aca8f038299cda1a0c0f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ketan39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdeff6e55608b99a93385604d91944cca4877904bb7d78eaf2a65c79399bbb0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127561 Malicious code in iwan-rendang65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74372bcb86697e38662d5304c48848af4717cde3e7c547aeab43b14e1fadf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kue6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a18e508fe683dfa36fe36c12db99569bdfa2ce9bb998204b0838d26aad92cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-telur44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bea09b6ea479664eaf739e9f5d16e5ecee5d7195a454a0d2c216d37bdd8434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112939 Malicious code in budi-mieayam75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef3b8bcea8247cc64252bd942bb5cedee980f60a4bf1628a02441b40f46e47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109708 Malicious code in tiny_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3354a8a78c7de29ed792503b12a2398996a8c611cec69ad17fe440449de4f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98379 Malicious code in surya-mangga29-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ff62df8aff06e3cbfe644d0f3bea0f5ac5594c26465ec792e44702a436e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...