MAL-2025-165883 Malicious code in shilang-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7214031234143f8d06ce0a9a42e15d0b724340ecb8bd3c394823839982de1a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugymi-amamagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6c4a2c3369205fa54145bbeeedcaa28638012181503e49ef22e38b5c68a7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2e80a533b67b712672e6985391aa383cc0541f1faf41fedec2fe5784144162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151336 Malicious code in abina-amiab-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a4ae49c263115c9aff315516f7bcd2c9f7de562ece682346b51a0ca9512602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-miu-suafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9283826942fae70804a593f5414691f64899ddbe80a04766817f7bd379cc1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151983 Malicious code in aibuna-mobiule-amaneiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9593cf040c9e3f0f66e19b0fe57e016acd7322efdf8937cb15108c2ac6bb09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5c1fdca1f69275882838fabd2dc40544840b1d52ed394042ecddc6537db707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a35beeb5c00a5a3c6e78919c6407f1ab921cd1d554cf1886221b360b915a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149003 Malicious code in upgrade-bellatrix-luna-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85dc522606bd3cd6fa13c74d69567d1c35e65f9d1959258be06cf34abce7f7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142766 Malicious code in gacrux-ganymede-fomalhaut-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1a8e305affdf35bf9259a55af9f339036df0c226f0a7e230b625d81909cf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-fomalhaut-chai-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f39492099e5c35700f3b300efb4232b727c56c7bf176574b232c0f5d7d127f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144898 Malicious code in meteor-apollo-upgrade-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6297cc76699859130e9718018440cd30c840913c432fca2c2f56741aa440712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133674 Malicious code in galih-ubi84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d46cc2f6071635350c546fc52ccd36711cac55fd0a04f6256fe6261fe0e4d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-gudeg69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89f4ff42e21198716ff5d2191209cb9b27e0ab5cffd391a5458af143171a4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103595 Malicious code in happy_lizard_white-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1767eb5b65192da1a5b12edb9a6d92801ecb37ecba5050634394dbe1b124adff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99296 Malicious code in agus-ketoprak11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b33ed65a6ef29a77607e0e2b75fd7041c42669045589d456b8edd49a722c3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98561 Malicious code in zain-ikan22-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a320c624ef3e9a35ca55707ac2aef48fb8610523abbe004d6bb1033edcc2099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rough_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdc64b2ff815ba950305fa931f181e51788ced84fb2829b7af9b7c3845ef13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87953 Malicious code in lisa-rendang36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da627390e907afaf3a577481695c46b11c01b606d1be08e27785991d6a7d779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80852 Malicious code in qori-bika11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbae8a6e28a5fab2c9cef71b60be525487c1c9b5bc7670e950a3c158855a5e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...