MAL-2025-188161 Malicious code in mysql-heka-version-saturnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2111a15423e5ec2213bc83b5a7ef30ec0580c5fba728b2b7a7a02b828883b69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179485 Malicious code in anabuyil-inupaubava-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70040e47c3c3f5899b024b023148d6cbab1a334b745dce679c44b7ac6a2de4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-ogaog0gonai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c807c8cbe5d5ee46cced245a33cb14b2467d253864787b92bf6ca4b637078503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160008 Malicious code in manuk-nai-ign (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7ebaa7e9ccae0ef368f771e8018c70016d03578f6c3c48c3d113e809084b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avo-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ffe01a46ce630d21ac50836939e547da4976ac9f434fea35ca99b2e92b9b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4cefbe1dba166156c538b31b477276bb5faa15a5d510db5d60ca679a7260fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-spectron-webdriver-neptune-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfd834cc94f3d97018894b7ada929dcb9499b32c25a4f8e6c33026068697ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-asinan9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8eb9be5e602b3cb7b46337ae2b7f58a0379d16e8b430efc67630301526725d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-dradag97-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c9af1fffdc70ffc50137991b9d0755f812412d30327d69e92cb10a982ef077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-rujaksoto25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833205c2da31ee1137d34a700aee51896b16db77da7cfc59a5bee2b78889b86d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126349 Malicious code in fadhil-kolak95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b0da80f90b1d2160e4b2400a39c995d20dba6774aa9e3fa057498e28eb0489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128265 Malicious code in liquid_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e837e24890858b2dbbbc20068cd5609f6099c0c1fd0cc955bceddda5d9b00ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131151 Malicious code in wati-bakwan80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dabec1d982e75a308a3db1348841775ef88cbe49fafec01350025b6fd20af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ongol-ongol22-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9671eea5e09447b8bcb5bdf17f3bd0184725c7e4ba433c564d20a9e03bd9136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eef1a80e09b767577c0fb8f51e4faf5c5130e0a43239f54701ac023977658ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83600 Malicious code in bella-kue9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67f1f7f34251ada4e1f3c23b88d928e57db2bd4206f5aefc69cda949bd9e50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82190 Malicious code in voluminous_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a749fe37455485279e2bd226f3869e76a9b9eaf926d2440d82fa72cefa59a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66108 Malicious code in wawan-nasi8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb09fdbe337e96001eecb5a40e77953f84fff49a65486e36f507c737d459c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61422 Malicious code in supposed_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5113491027ed83c5ffa294ced44ff2156785a27ca0f1a59684ccd87df137382b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55208 Malicious code in andi-tiwul50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64068182186c10272cf2b99d33b900bd00f79910b4cd6d3cad6a5c6435034a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...