MAL-2025-189853 Malicious code in telesto-neptune-tethys-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60aa630590205ca8b7b9fd1a3f55a9cd33aaba2af30218049c11201e9a43c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186376 Malicious code in cron-tree-query-unix-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34a183643dd8952a10e6cfa7eadbc3debad2f90787679d22a85f961c815e5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174095 Malicious code in divata-tunabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5a171c0bbbb7c7fee721c44c173269abd8ca467bb55699a28b9a567f63e7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudla-ofog-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1ca8aec5dfe304cbd21912b36fb18a8cd4cee6423f8d4d6fd5c5fe1b5422ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149991 Malicious code in @mipta1/dsfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f263fade3fc2073bd794d6fab1714441ee692cc76b83887bfdaa18f8d24de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160072 Malicious code in manurung-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec7cfb25fcd174234b5f4031cf4035b52c17a05ab30b55a4680d460d09fcad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-commitlint-config-angular-soap-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd303f21515f0dff1bfdece8ef5956735f37b53c0ae72f27c2547c01d44b88c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fb4f004db7bdeef7aa4f87ae08285749e84f193e5e441f00aab1e239a8d4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8bf4f1dbd9a7e6757c7a127b9207cb6fefe05c78c9b9827dcce702566b7868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130282 Malicious code in sour_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a30c38d88e5a42133a786e094210d74bf78ca4c6766ace27c272508f54e580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe094d268e5ceb2e32014566095dcf5a92bfdd9e868bca5c89b1c4ea09dd3ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-tumis46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3438dd1f873910b855fae6e7f30700ab0509555a0b47810e698859c1d3abd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasicampur71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9696429aed7a665809a2125526c3506866ab1314b149af036ad78adc48246e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cb1e5cb52b3563ab0ed1af3c6139d2739489c1276e9a0e47a3b7ee6819b313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104047 Malicious code in inappropriate_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e8eec4cb7acf2c1a9b64912109bbe532cf347f8d3ca189c14409b1754b5fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kupat54-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77aab33ce3298dba09ba877a074b5ec415ad7afb8867d0169934fc54921ffcbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98032 Malicious code in kurniawan-kacang47-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77476643aee1a6dd0bb62895e54fa9fe8d6a4364e09d723b010e3264f2d47733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83609b46c37d3c1c9b4acb33437610a956157b429446bd950a9c8254daf526f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-tempe73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b034dd0e908a5b636c7eff8b8c053f12c28e2d033281e2fff25f9159ab1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84805 Malicious code in driving_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a497108796886883b7980594d6be2f2193f6a2f980204cda768007bf487f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...