MAL-2025-179440 Malicious code in aibola-miloipe-apaamaumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b30a9e91144c81e6f1a64df9414328ec664d97a81c2abe6c97f59f67060e314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad7c458f673f3f1c1836e7ce5f7c0205cd66fa4ea803e84d8f43bc71faba2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140100 Malicious code in bootstrap-comet-convict-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1090d16dc37057a5852adbfd5f493146d23a9dde058a92e0f5e68cf23ffbe844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-jasmine-sass-loader-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71be3c59e0dfe748e4027f1079b928a11014eb9ed0dd0db124e3b57c425b16d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135260 Malicious code in lisa-takokak11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6fd4fdbdaa54cc6bd4bde22f828b09af74065c9b6b97ef9b9c24943e96b7f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tumis86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c1dbf24ff4595c734cb00f7bf8920cddc478f5772f9adc14b4963f50ffea92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-rujaksoto77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3fbd532b0db87695a814240ecd0246243910b1dfed07cd5b542a0a7ac18736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99069 Malicious code in acceptable_mole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9101d68aba9727dd900f57dbb9d8d58f2ec680c0fb41da2fc2ff8997ac737e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99250 Malicious code in aggressive_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325def1b3e889d13b6c8d62c7ce9a03e2191e01313350f80089984edd926a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88612 Malicious code in nadia-moci54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276486f5154efa2dd83607f6ce0f9ecbf5ebc2a1d332df309bcd9ef5b8766600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90519 Malicious code in sinta-jengkol89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287937bf98b718f4698fc50278e30d06f0297edd8f0caf155abb5c9884f184b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85138 Malicious code in erick-serimuka54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6396cf4b50d813ec58d8e00126fe08982431c7d9628b85044e66757117e30b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81945 Malicious code in unsightly_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad648f44026ef70e01923b1bff4b2b27244c84cc3556e35bc78c5ec3d0990b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...