MAL-2025-185545 Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85706cbfd581fad81dabf70d7a7a10ae9b714ca2c7b392c8337518cb0800d8e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in idreesafzal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38ec514435dd7fdfef1b82e354c0a321c2608952bccc5862dbcb663f962a99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291be0ddc8f28c64952f15c082f29db949a23a97abe94dab828ca0f32e5ae887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159748 Malicious code in mansida-nomffuadi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d519ddc8b530371ecb650edcc47485bd87c5eb580e7ce7700f46dee755408e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116914 Malicious code in rudi-pisang23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86e51ad647e85008f1654dcc008bacc5812fbc57caee7a06bfdc532f950471b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-klanting23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d09598c8aab5057f183f572244fcd790a8948eebd9a78bb78c40032b931305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8595e94b563d4c2b61f1b6eb77af30da36c1644c4ee97413fc19928fd6b1f0ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 506462c7d0622ca14da02d38eaf349dd13a87d6b436b24be2d59ed1fb795b9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-miebogor45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e2374c8e4b751393f67cc071ad808e51413a4234356f6d449b704dcaf0f814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76962 Malicious code in bambang-rojak4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf0320ca63285710e28a8fb252f1eaf9e6543d4ebeea54d603f1ecb7a0b6c053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-telurtahu25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7486f6a4874296782f50ed6c0e1a010713c88cfe4e766b03d0cb21833d837405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-jade-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efce94661a21913946cba450b0891f699316d9b3e24990bc8d574cf3ec765967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-purple-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f792504884d954582bc65a3b02617d11bb6a41951da2c5dcce49b4578744a7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67064 Malicious code in brief-yellow-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169054993c270b3cfc19dc7c79db22ba4a00376bc16f6c6f05ee91e53afc2e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52342 Malicious code in ocha-nasisayur55-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f16a165184be8765b9869053feb74a88fcc5bb49ca5ea511199c5c792626ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...