MAL-2025-187096 Malicious code in gammarayburst-quasarjet-radiometric-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacef3e59b76a6802cdb5a0e99fd3ba2fc957f0dfecb68349f709e0d0256ce91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed858b064cecaba317074d11882b1b22a7a9612ac5f64b094056db593af10f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanur-sa-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b871f0078a96c58ba1448967d257c97a2d2869066bbaee88ea0e2a333ee5f943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174239 Malicious code in goditu-tufabm-dibat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e980c8dc7a879ef7feb007e1f498fe8d2edc90d11ff69aa62dd13e2163f9773b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154975 Malicious code in fadila-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568fd6da59a0b2d8bccb0dd2ab4fbe256caa0dc2706b54cb806a3ff532a5eaa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7720be9e853ad7071b7b27f3d91854ac615b370afac380561ca969352932ad09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyuudua-iadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9a09805ef39f03178fe09b5cc6c1c543498bca0d10c5e2d3edb5ee21b95118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162719 Malicious code in nokire-kore31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf54cf1576514f3a01cfe7aa88783a837e527f40fa1a7b651e13119a1b2f1af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143837 Malicious code in janus-style-loader-alphard-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46be8a3b2073afdb630484fc8ae7adbabb0cdfec815282e31cf67e4fbd09eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-private-module-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc66d2a257a4cae15833c68e90d0d126ae595afb14baa589948057e3b8b1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140651 Malicious code in chalk-orbit-dynamo-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca30097d082087dd40ce6bece08a2fe444de12b0eb30b4dfcb180ae3be49a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133188 Malicious code in erwin-empal38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87122c384993bddf65f74123bcda113a0b14cd27a65f5f47693554cd2ab4427a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119560 Malicious code in dono-kripik95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb350c54f9652b8152b798564c7c7a69fc5984ecd8273c2e8ea3ded25db5eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77ec48d13ef7aa1bc8cc72e0de395d5e1011adf5d4ea6a7fe4e6cbcc3f4baeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ikan98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9c5edd82d407fa73c9e41c8fabb719896921650f7f23d6f7734b52602b5f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122758 Malicious code in qori-kolak90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ed6738b612c18eb451bb0e8298255d5144acb067aa2951a093bf21d02e4ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113700 Malicious code in erwin-bakwan64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ec6af2c66c81bb6c0707ee34cb97d46779c6cc50e3214d631e961cd3eb61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108182 Malicious code in rodrick-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277d01789f89f4a84626df621b7f4a69c340a9c5d691c74f3c790cf25d81e24e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lara-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0becca1ce15b4ce8f2e4a5472e14dc67bbaaab50f29d51ff2b8c364388a410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111505 Malicious code in zaki-tongseng19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f0181b1186edb3e7501a9723d6a18e03bb519a89359bb3eccf12b49fc4493ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...