MAL-2025-186102 Malicious code in chalk-resonance-triton-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf63178531eb1e18ec7be76ee8d7757e6690fecc2d546232fa954284ad7bee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc225dcb5c945b05ef94a2edbc308e01e7abd3d055df0fc78f94a6bc382cc3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176067 Malicious code in miftah-miftah21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49a46ea199403d63614d67dccf0aa5101539d3b65bd4c957f12a4f8a7e03f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-difay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a2b73877c92f15014c5f37613916aee09002dbc49f57a49aa417a985113ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154513 Malicious code in diago-kulpo-kaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58042849d2c04418ee4bffe3ef29cb0b1b3d357a5ea8ebf4b53ef2f2b2660855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faabd6a842616b99973267ac54e63a2a08806a2f7b0a1ba0d03c8df50107b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db57b5739b4d4de35b4ac69bbab350014d0d603192d30a6bbc53436937cc157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160983 Malicious code in munya-mipta-munaro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865cfff88bb13c34d837aa909c5d3511e0e2b8292e7d4294903aae6007d4468a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145864 Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0637961794bd6bed51e0052831dca6497cbd5dc4bf9819df4587d8c1fe9e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tahu68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a21f363e5dc7a48fd4f5e35171e76603459eb0c0d1ac41ea7d04926ce591aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130660 Malicious code in tomi-telur1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0b5cc4a43584cc42e4da0941f1a9ebefb2ca8d5a25ff55a55e0dc5b70af05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126646 Malicious code in frozen_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bced7b6720160fc376b183191ca2073cca05d706fd89a0c01986de545206a7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111903 Malicious code in financial_halibut_lavender-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85aef40b3af5c819396cf237af6a7f16701e477a8b70bb2a10c215dcc60f6668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101265 Malicious code in defeated_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2454034224097a2f8c63f39039b04dbdd0f17a31dabb6334240efa2edf1a0e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_ermine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375583359da47d8418cf3786e7843ef1e5df4d896a91563132cf82ffb71347f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_aardwolf_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a0d323cd359178c6ba12e28874d7be3d446878954505f1a0ae8b8c48f0db7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104047 Malicious code in inappropriate_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e8eec4cb7acf2c1a9b64912109bbe532cf347f8d3ca189c14409b1754b5fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99438 Malicious code in andi-kue87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f7a7a2015d5e720a64f2cba05497bb8ff926712a71629c606bc183a043609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96307 Malicious code in repulsive_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d659bb2e446837cdd8a82546c62c8c0e5c57b719a568afc6bed43294be6654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd43c64844285445385add9a42ef4177da89c8d9a8b146c63ba7abb871f9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...