MAL-2025-85148 Malicious code in erick-telur4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0d3a7aa51779bc9665b4e53571dc3e190a6817761ded7052c92efcf00df5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87050 Malicious code in joko-gepuk29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d89cc83d724e0d7cf85e6d55c6fb62b69ebb7ca16d6727993775a8ca013f844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81984 Malicious code in utomo-naget90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2357309842d586f83014547f0ae6085878b5baa357387c44e455a3fb1d7a8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71585 Malicious code in wild-fuchsia-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50525f3aeb8b5ce069def9394862038de8253150b232510e7b08c8be61b73be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-lapis63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01af020524992a4e5c90f601dd4025de29e69d63367f5317027c2be96319f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62989 Malicious code in few_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb87718ec58181af29b183d625e45cccff761e4ee3cf0842a3572c4930ef5ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-semur42-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a66fa228d23f194f9b77458f02dbf1f4b585d38ba52b2186608459fce479e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58955 Malicious code in tomi-bubur45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8331189202db9fbef46e2b36745f69323961216c9b98ad86292f001a83d5d8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56164 Malicious code in excessive_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceef8cacaf1c4a664436902ade4f5eca0146dbcd66c45ea019cf244526a72082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57634 Malicious code in misty_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5800d75cf6d8ec18b5a648c8401693780722a025b571db4643bf153b039a349e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51998 Malicious code in gita-sambel52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54246af91e6494712973588bd19db899161ded767c9ecdaf72d7e893a0ca4513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50628 Malicious code in vera-getuk36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7609e67bc7cd44d0b55897fe13bbadf78f6957375b925ac1c867cab0588454a1 The package vera-getuk36-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...