MAL-2025-170984 Malicious code in bilalnaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dbd57023dc029e98473e9c9053df3d10ef233662677d4bf36a3dda5ad5aaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165650 Malicious code in saku-aiu-unianusiakasapmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b45ac08e5ec90e4bfad6c90aac4592df67270d7cabc7e311683a221274fe5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unmg-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2680ad4f0c1e9ee6eb10e2c958ab80eb710b07b06759a43c163f43b17118da49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-baam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be800a026149df2f288be3e2fff8cbf7aa6c4c7b58a24da1889f5eda808825e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21fcd57f2cda850f34daa38bda653070bb364d0c50814a764416625ac6decfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-gacrux-meissa-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f58c5e60077088383cddcc226e0f7cff29fea8f77e9046b295e6ede534d6a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-standard-apollo-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d60ec031b81ffb48378ce94a8bb54350c86dbabe71fe1e95d3463ef3400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-wezen-nightmare-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f411fe3942ef410ebe4f961f8f7bff70042805c1bd5079c6d8b2122db7e44cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-markdownlint-concurrently-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260d3be4e484f62d2fc2a90189330282e1a805f14b6990559ace653282d90529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142817 Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137821 Malicious code in vina-klipo14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a2f83d84d4cdaf305d8d8f8cfd20b696a9d6d54ba15a67ab2b8cc234adc907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a983448f06628972857768a1228a8d080ccca7d2a65d0b309f93e01121b1d510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in governing_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c40f16b7c8721c0b7a0eee49fc93070683514c3363d88ce579b7b3815b389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d763753bd37754a65b192aecd180eb278b33ea390241065acc8946867c3b3fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95799 Malicious code in other_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44ca8a7989238dc0a379ac686de6bfdc452050aead8b9c2a11e1c3dbdaa07f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95447 Malicious code in mental_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b95c3bf3eb8e387c5e99d24d15f78dbf4bf9c64e72bfeec145e028b88b17cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88600 Malicious code in nadia-kue87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8adda5c4e5a15f5372eb652cfe3cdc67296fd213e325ffbf93bbae8eda37dd38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71501 Malicious code in voluminous-jade-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc56092245fc81ed78d1a20e8465a893126b38992874501ae53bcbb1cfb2852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c728c7065cebd1b0b6d3011a360e10a810c156733b3d03e43a206cb576b98b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-rendang81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108f0d0b81c1786dcefc7d10c7b289ff9784a74327fb43af830f1cbfc33abf5e The package cindy-rendang81-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...