MAL-2025-167455 Malicious code in teagood-nalikami54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2ee92b10489818b0c7f0d08861fb4ecfe9413a7fd52353b0cf3186b01c3511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159771 Malicious code in mansila-taila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b8f24d989798f4fbd9ced8182b0ce214ddcb3bd1ffb38d5fff182f3b93ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163647 Malicious code in nokirne-asaka15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094abbc8cca5ca06de7170df07abf032cf975930c6b5d989ac9774e4e74d4c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142806 Malicious code in ganymede-kronos-oauth-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc815bc9ad378013849b00f6447853f5648e448a02cd211beacbeb2bc05de3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-ganymede-norma-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383622fc4616a1973794983f9948fc69040a14e146f63c10bd1309edfb61567a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147612 Malicious code in sagitta-publish-npm-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c7fc955c277c3de9a6cc9a4bbef4982f2f62079dcec8f17b305ed1db8ba22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a733281dc07bca20b9253f34e8a9761951634fd49de57aa4d6ace582c6f189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-mangut45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89354efa40f91e368067f0f907997f3d3823183e8aaa1e7dd28efbac5ce7ee94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103358 Malicious code in grateful_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606bc6f2a461251f750e6347f963da520a45e52bdf255cdd2f93399be834b6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_sloth_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970210e6ae5ccea0625bb2ca3a6bfeb05e6f6944a18304aae4b1b6f78904a2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96867 Malicious code in sunny_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5433ba41b688ef9977c0d52955aea46692408ce32a8cde70dbb3284db0fd680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent-rose-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da82e72c4315d982aee6aeab4fd387972ed302aaf02618d128a4aa8a3819d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62797 Malicious code in erwin-kepok70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56791ebb59ff7c06c9dc10f636bba7a7b824b8b23f9d83261413d7284686a89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...