MAL-2025-187682 Malicious code in key-kernel-transpile-test-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a484d28ce1ebc6b67317bba20eae6af92f4599233593aaa92ff14e137a0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186964 Malicious code in figures-duplex-magnetar-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eae1d7027882b6a70265a27433bb8857139add8539583e992546d667debca8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nutabagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8976c56f18735fcf2fe4398255c84b4b5aedf6af75ea9028cf6260ed81f9cb58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteorwatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25240987551736869c38f1574d185327f7cc076a4d8eacbafb4203c9272958f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150806 Malicious code in @miptaa02/kwnhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d045478e07c8fe3cfeabeadda1e69a9a3ce52f3c54756b426c9b26d14049a9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b348d730122e00dc6b39ebddd6f8e926d0912591d3c45d2623ddeea6fda003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manta-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae27cfe35ce96acded3adacdabbeae9151f42680acf66d07563d5f34c285905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3450d754e526cb305a74616b587fe87b080c0812abc502eba1a8337cb2ae485b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145024 Malicious code in miranda-capella-electron-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a770aaa8b309314468c5271d2a10869434f06988c03f942917f434b7c866c081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-astro-materialize-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8474eedfb266d52c3e1dfc1fb588e3b8fd8b8541a1b2a946c7249acdde5c6458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-oblok90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b829043a5167c11e06244b4be6c9e9f7623a79cb727d7013fd030ece2e9423c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e564ec4fb6d3c535ab2f803aad57f778b3d324f80c99b19083e7a685d2ca731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126157 Malicious code in endless_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78700483de0a1be5842dae689362354a45a5b6ee05bd6ac7128f38822f1d761b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46bb74c487b49973e21e39dc17044f9751120c3b6cc207356dd9184ef1d97ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124067 Malicious code in vina-bakso15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a5909c0736ee4060aab87f7a39e9d2cb235fe1e190aa1f82c674a3b0a6f6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-miebogor79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8c8de716d456f1e99c729bcb318b0034395af5780b687c2e699ef993fb23fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116136 Malicious code in ocha-enting4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3212c4b18f90e22e562a458469f9bb5267c4d6ed743d94cf4221f2619b59e441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10d8d3ab0ee3a58832cb5c85f554a84a8459aa2cb537cfc6fbd507dca2f2e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102537 Malicious code in fajar-soto88-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c9ff83b8789a3dd38b8fe62df7b60bef13801883f8257d359aa43899e32b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b7125ca74e4a0005d4cedddc89f3b9b2eb841e2a1917ab37f2a517cd3e120c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...