MAL-2025-176897 Malicious code in nuragi-sutaufia-dagug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7ff1ebd7bd1b9eab779210cac49155a20544efb2b161706dcd4d9cdb206000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5cead48b9aeb5793eae0468d13b5a584f4d7122a5f5443732acee54fe871f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153576 Malicious code in avomainah-frausu-oau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41934c66659950cf2745c65d623b0ee69f922928b9542863615b81dc560925c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154278 Malicious code in demdadf-sadudar-addo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ad12d49efe53621169f2ae0c7b77f16645f48b001d900034d90be6511bc8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140115 Malicious code in bootstrap-optimize-css-assets-webpack-plugin-jupiter-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426f629cc0e9636ebadfa27f808f9a88aa73a6c3c25a7270e3812c3e86aaef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146265 Malicious code in pipe-phenomic-zenith-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3484da591110f315d8c1e498f215420eaa5191a3c0274c31ef6498f72a4d239a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198aafe46bdb24e8a559dd68030cc352d7064278a54a481682e33e8f09086ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-rendang30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fb604b8c0498b51ea25987fb4780a58664bcd4af78c4ced7ac2f7520e44b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remote_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff37528bf1271c7cd2261c969a806888db3c30a7af41a4f1a0a015d67cb12a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09afc664dde55d184781750bb69d244f00625d8864c9b6285416a53a3d7a365f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112956 Malicious code in candra-bakso65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f574bf850b547704633029423be6622562fe7a7c632b73b74ed529e6ba77d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115163 Malicious code in kiki-miemee88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c46283de39fc7afc8c2c6e12f0bf8530fcb6c10d7b3527bae9afdbc38050f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110276 Malicious code in utomo-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7591a4b3a5416fb9d8f5b2d7d0d68a2ad9b77bc84862184db1e2b7f2c322242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98801 Malicious code in magnificent_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bf0b5c2ea8db458454253bd7c00583924d4bb9d4dcc8fb8da39a6f55fe0031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a2fa4d57f7d4cf3a151f000363fe7db23912882e95e2c6be94c68d65ec5a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-kue50-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ec28aa6904062553cf8c3dcd1b40f567fc59170125d6a275abed81a96f3737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90659 Malicious code in siska-ruwet18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6e3b55e9b21e5cd658a2c99802191d2f69dc57fee57005b0fbe21f52ecdb73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90439 Malicious code in scientific_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11880b3176f5ee1ad13b0fafe6a175530e2361e7b09d85a99bca0d11fa811670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91954 Malicious code in vina-tahu6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da830807b31350d357bd7b4c56cabd47ce3285a1aec8c97bc3f420f76c51cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-nasiuduk60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca6def2bda58585b7912917d384258528d145c95b862bb51f54f1d5a198180d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...