MAL-2025-190471 Malicious code in zephyr-sadr-child-process-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146ecbbd3d8f2cb52b7a37a21f83f89b55640c24e6ac37ad73bd82f76b37752c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoigojhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba24826b7bdb486c617ba88e6f1ebdd88b9cfe97c3c7642be9b5254ae3c6c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3d93c4c695452d73e38e8881e871ca03ef7724a83884e398539bc648b77771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151750 Malicious code in aciyua-idust-dajauagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9487caed4f88c06300e56c16fce2b5ecca63687c378293fb671bbd954db6366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153552 Malicious code in avomainah-frasu-ofuratrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70eb6a3fff04f5df391bb447f76aa40674708c65ac58686c1bf1bb86579c879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-buburayam62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7723bb5a72fd7e0a81dc591e75c3d60a5edb35e163ec716aeac3bce55b25d964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137254 Malicious code in tender_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a0d8b8be4acd830e9984937b3321f2d96184d16cf5ab79e58abda141b2c0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-nasipecel89-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8fff31eb76768d5ab5e899f2d1039f2469bfd0f7cdaef16b2c1f9b5d794720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-toge46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f787c5d48dfcab425cffa372f1852d8d7200aa897ee54ec541d4d86fda51138a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116400 Malicious code in physical_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa92dc138953f308e2c0eb0185f75130727eba8085fb6f25e43de822370731fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111643 Malicious code in acute_blackbird_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07187e0562aa868a5b145b1925efde1a3de1156ed1f48ab40c014eb819aaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101861 Malicious code in easy_carp-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4bfe7f4a0395943ec95e05fb2ef6b49e39ec6464127fde6009ef33fadc632a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable_swordfish_coral-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5544001be2a29a5176310fcc37f348d8e1ba8fcea6637b1b02885795986fef95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100149 Malicious code in budi-getas10-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5b22439fefaac8448abe0dc8946923fe726b6341a44914790ef38064498e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106316 Malicious code in nina-jamblang31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f0938059ada4956c4e45f6230db27f5b8d788d83b4ae01f67801488d7d48092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5872cfc42df22f047a194c3807729cc064b3eeb3683e18718e9497c3f277ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f5e2790bc00373313044eea375dea243549a76e655715d6dd0e958b2725db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tongseng66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722ea6572b030c8fbb2c74c807bbec42e2460135cf969b70ab7d53583860ee64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in filthy_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31577d0432f41b29bd1430a4e9448f2d0ccb01b672adb606171d9622013d73a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-rawon50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c15479133388af64698b0fb10e0986738a5de2a7c63a21b0c15d8632c7409d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...