MAL-2025-184674 Malicious code in oliobc-uyg-ugiafdabafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880ffd9ca78fda9a82471f9c58486b5e08ea5b6efdb1c6facda0a420249e7e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95aaac545f5cc8f70f46c1a67f8838a79669234bf14b3a622e072a5c8fc86928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-public-version-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc3b96a48c694acf88349bc3335188f0008975d6ce32521775b2876d3896a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147448 Malicious code in rimraf-dagda-sass-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08cf31ae06b8cfe4006f906ef9b24fd19a4e3179eb3ac12b3d42f4a7e37ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134568 Malicious code in jaja-ronde69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d74f4048bbac8408b3c1bf5ac5f6754975662c7749ce82d4d3f08cbd4cfcda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127602 Malicious code in jaja-lontong98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa85faa5c08b32c7a49ee67a361530253ee83887bd444d029345f2132fec41eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mieayam74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9596fb709e9b880cd3bfcf52700402ca9d1b2e875e461b6c96dc8a6c15dec55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_orangutan_lime-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0306fa64efe7b1408c7cebf751203ee153b196749741a1e56229d0f8e599086c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in davaris-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa22cc53d36d05456d8c2baae0f53f5451635f447e43862559a1034512aabf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109510 Malicious code in tasty_cardinal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d6d7042482402b3b24a95fa30e0e936a25a249643bd8b0f5a375a43939480e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a881ffbf01c9bfa0baa72ce71ea431ab2aa6c7222516adeda1330b036b8b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7535416254f0b437046654beba452dcc63954b9259b968f6082f5cfe9bc7fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91591 Malicious code in utomo-lumpur83-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0292b1f7c1670be84a10d70033f7cf591a2104a47c363e3fbcd72a19de2443b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-toge95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502da7a9681c9ae1a04f33c33666ab09b99ea2e0381eeda7b55e6045234e370c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-lapis5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd3ad86ca231978f0f983ab45a70e717a61ed8257ffdf3f343d984d61554f13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying-green-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadd9470cebfb2d5f0e26cb6daf3851429b3cc82ab8d6c853b6c479403aecb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54147 Malicious code in patria-lumpur10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b2af82e269be6107a11fca72c07830008b8136fe6b68fba22c0e1736653be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...