MAL-2025-188838 Malicious code in process-simulate-parse-integer-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f595e875d8be76b910f8b5812d7c40c89b52395acb636de9b3c68cd19dc6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alakan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02de15831d7faf87cfd4cacfd7d21fc794b099c4ed525fa2df645e539d8d32bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-awhaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9a18eb358677f65c442b92bf599580b7a14b2225af394f41994bbd92f5d0e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173967 Malicious code in diva-tuai-inj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40416b778b3a2fd88171e779ea85f66c500d9c210126954fd6f9420be63c6c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccf2e5b7cdabb75311e140b32617df533ec3a06199860b7b0a96251f32b0237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739a5157fdd84b9f1b7b0b76ab116ecbdfa38e26636f159eba9c200f7f5c63f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172515 Malicious code in verts-otigo-nafgfgoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d514d1323748fbdf510d588c651f7dba7770ec509b96e4eeb6937f66c941738c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in idreesafzal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38ec514435dd7fdfef1b82e354c0a321c2608952bccc5862dbcb663f962a99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151187 Malicious code in aben-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4798665b638d60fa8f41e3fe7875d6fbe117c5fb32f0fc337f20ca9d506fa188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudiffa-sayuguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf5a08412253df7dba9623ee1aa86b0da6a454c56c23ff915ef6e429025cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727ea716c6db03d2302ae2bce40fab835b2a24ac80e1a099ce6bfdf58612453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166671 Malicious code in tadasdhi-nilai-tesru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7dc282a605f23bc7af8869fdc473a8c8248c0418a58aeff2f466daf38c67ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156886 Malicious code in irashi-21-re2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f10798ca54546bde1805c7566ff214c575d1b5a13fc2d3154f73b32d16f7167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutawadr-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d785f05bfab38c79b240e88a0dd09626c623281bfa91df55392ee76ccdd7396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipenajar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64dc301f17098e80e67d7afbe583d3d9fee7a32aec85178a16ab694631a2788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152711 Malicious code in angin-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6871fb8964505144615d6422f003eff7e76376e2280aa213485eca152cac177f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-postcss-phoebe-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0045106a7c2a84cb437a40bcd035adc53aae2e23c51b66117eafc2770f0ac1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142153 Malicious code in eridanus-nightwatch-draco-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897faea076021827c61bfaaf49e286cca7ae17bae43b9fff7e94eb35c29e8b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135257 Malicious code in lisa-serabi63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40af467331e1c83662167be59f967295c8d873a50bef16bfc00682c6aa3f67d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136866 Malicious code in sari-tahu20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af34f26c3bb6d67a4011759d01119e8a0610cf6c633f83a4ea7fcbee39343474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...