MAL-2025-170739 Malicious code in ainekelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2899eef13f4c52c0eb5cf0310eda78a033a1e56d24c7bef9a02e8a149909b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miptah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a47700c34aefab9ad1704826fa4c76bf2196fecf69c96a4890219876a1b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafaru-tuat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40751a43efc8eb7aa9cadec28c4069623769a11bfaa927d9051ebf0ee78461ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166170 Malicious code in suharta-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c9d5c161f7522c8bb2140b62a6c7d0b891cfd53d605b6a5563737171ad22de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150376 Malicious code in @mipta19/gpuhsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e4287dc4b68eef71cd34b68e7fce2b501365a76cba636d038309d845940285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151883 Malicious code in aiboa-molope-asimaianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962d1b7c4af3300ee8df8f06dbca8f5a516be2385a458c0a82425b67f8ca5056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168098 Malicious code in tealove-aruma41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3153b744dfd90402c47371a509b671e4cb60a21ed26a90f61de86c7d0dad16c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142559 Malicious code in forever-andromeda-sadr-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c25d29d91f79f19cbf57e67c5c4e2b0a700835050ceb880fa502657636e89fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-ubi83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3949087dfdcfdb7978dcad9844c5a692cff1edb46d0fb8f6741bb3b93450796b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121581 Malicious code in live_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f105af940accd98b0855ce2c210c4ae79d2010cb50b698125551aee2f5e5c1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118841 Malicious code in bambang-rangi97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58344635d1e8e5f2d4d081b3ad3e76b03f2466d50e47b730a0f7e8227c242f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd7ee64eb2b76788003463f70d90f1e0d9c4295604ae7c7afef9ec4170864ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106727 Malicious code in only_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ed848cc50ebe653a08ff4ea3b169e8ddb0a2214d15f59333b16caff100ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-brengkes46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da54ea7f56ad0a55a717dbccc4716681a621af24c33582455722d62174d536aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93915 Malicious code in dark_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c90e7ad3b5b48d23c558265a603db0b7f49334697e8d358cb525a5a2c9d2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab840b1bdf2f73af4cc0b0ef35a4391066154fbd9eccda10ac62794916a1502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-wajit87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55bf8458ab810d5f09d565a388caa89f816340377e8bd63cfa66406e2d57f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67170 Malicious code in chief-ivory-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ff092ca6a77baae9af5437a44730954436afb0a2c9a659944ede4fe769ed19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61759 Malicious code in ade-mangut66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9d1c403c57a6d5d20cbe3bfc81831b810776aded745c3dffec271a7963864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...