MAL-2025-170984 Malicious code in bilalnaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dbd57023dc029e98473e9c9053df3d10ef233662677d4bf36a3dda5ad5aaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21fcd57f2cda850f34daa38bda653070bb364d0c50814a764416625ac6decfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-baam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be800a026149df2f288be3e2fff8cbf7aa6c4c7b58a24da1889f5eda808825e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165650 Malicious code in saku-aiu-unianusiakasapmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b45ac08e5ec90e4bfad6c90aac4592df67270d7cabc7e311683a221274fe5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-standard-apollo-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d60ec031b81ffb48378ce94a8bb54350c86dbabe71fe1e95d3463ef3400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-markdownlint-concurrently-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260d3be4e484f62d2fc2a90189330282e1a805f14b6990559ace653282d90529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142817 Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a983448f06628972857768a1228a8d080ccca7d2a65d0b309f93e01121b1d510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d763753bd37754a65b192aecd180eb278b33ea390241065acc8946867c3b3fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95447 Malicious code in mental_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b95c3bf3eb8e387c5e99d24d15f78dbf4bf9c64e72bfeec145e028b88b17cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88600 Malicious code in nadia-kue87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8adda5c4e5a15f5372eb652cfe3cdc67296fd213e325ffbf93bbae8eda37dd38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71501 Malicious code in voluminous-jade-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc56092245fc81ed78d1a20e8465a893126b38992874501ae53bcbb1cfb2852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c728c7065cebd1b0b6d3011a360e10a810c156733b3d03e43a206cb576b98b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-rendang81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108f0d0b81c1786dcefc7d10c7b289ff9784a74327fb43af830f1cbfc33abf5e The package cindy-rendang81-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...