MAL-2025-158165 Malicious code in lintang-tea10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddeacfea33c72893f3437f63b08bc3fa00e315ab8bc0b817b047b2510b7b74ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758e08e22d46c68e7e0fee568a320f6f741e10061a3d952530a8c90615fb23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151098 Malicious code in abang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a3ba2a926350281bcfac9015ae95f6d67c9788f16ba49a0b6fd8e413bf6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2d76d8d1aa5a8f9a0c67da653040707d9f64f26dd38ab8570ffb4d407455c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-thfla-magahzfidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42d728a7f415fd486cca90b4a696c68be9be147f5f430afe2964bb184f2d443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nionai-lausukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccb71f6fd335e58f1618de6ae019fba0595b0e3ec54ee6562ba6c9446c68877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150705 Malicious code in @miptaa02/gzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67545ce67a79c8c6155432eb2bba485622ac33c4ef76c667d8fd0b1abbc822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155704 Malicious code in hariyono-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02e0638dadd44ef9ea9de01bd3b45cc9fcc7238c820714bd792ec7e39e60415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161159 Malicious code in mutr-sds-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a145a2e489ff790dc9e8ad5be487ba240fe2a8c65b1f7db70bbfb14f39ba12b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-kaus-install-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db6ed7182c80f2bff1213f3c1d1b6395ba3709bf4901536c388e34b08b53060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146071 Malicious code in perseus-cache-remark-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b778b31a4c65c8bba177c7cac5af3c1cba209d38f682bbcb2d35fae5df195fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-naget5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e4d9e89c3bfdb5d9b684cde0cbbc5395936b56389403cdc5a242e06ab1a84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yammering_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a046b98fd48f7125a1d8b0ac44f49ed2c498639e90d1dc3ea6e6ae92ee020997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795caab7543582f8633b47e154140f83bd4be654b18f32727163a04e2c70308d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-lapis6-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356e3fd0afefee8607875c48f424d0c2ded71731114618d9c55066e5856ea02a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131491 Malicious code in yanti-empal12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133b63d338a4ae9698051b18f2a516a0a8ac65eb44194ef712637aaceea3a3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129023 Malicious code in ocha-dodol47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83218fd2d0d4e692291fe48b8c4e851a2ec9ac9940f2944e344d2702935d16ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-botok37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c52e16799dfe440e5fe8addce0e5437e30697367820d08af25d1e224613dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-ragi24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc3758539990ab4902e9906bc9e27b5d5a194c152fb1c42ddff69596619276e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-gembus16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc6bca2654a77940325fd23995a601a209112794e32051f0cff0fca0f16d181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...