MAL-2025-146927 Malicious code in quark-kaus-mocha-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51907e0511e3783ca6d060b1760d416e9bb6c9bf1e56b1a51d5cff0fdfe52283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146790 Malicious code in publish-jekyll-miranda-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6feeb4b563ffc117fcba1336c759485b16a38dba134d42144cfb8a11dfde6d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-puppeteer-winston-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da7751df8e8035a7d7a1e041dcaa9f572e67a2ba46dc6c4d55f8b77556815e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146691 Malicious code in protractor-oauth-izar-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d68bd7685f92c9fe05e749f9754a0cba699d978905e494f3045f2e5beb5c437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-beige-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4badc0df98773cee9b3f296eb35c957010413dcba9bf6de5feb51ea0f86fb384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-klipo8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcbb6cea0a99e307cb4fb229a953d10bcc2020e44ec2680d55544959d1d144f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138492 Malicious code in zaki-ruwet10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ddc78657fb31a8198a02ef230dc7b8840e5a88f5353427dad2f483fbc706b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greasy_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24190f52ed3dd6309b08237a8e9925ba1e5fb0ae67a3d7722a7d0d941b0bfaec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8866cea3425dd670d7f037271dc76320b7d6bd5c541af10917229ab30e88ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disastrous_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d125065d76e1b0cecba808004e7d9848c616a003ce44e767c45b8a4299920435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atomic_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b55f1e2d2d2fd63004aa8df0272e23b81563242a82484b67283a4bea6639ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117097 Malicious code in sinta-tek59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1527639d6a5b53aa0468cbb62ac4eabe0885f83b3e0d5d84b73ea7f8414a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112822 Malicious code in bayu-lontong8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f176cdc1d32759486f20e0c3ab40ce35aa7304cb02af249c2e02f8423749fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tahu17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a984951923d1aa168ea89cc5923d46375e7f9c950403aa0ce4ef19a98a8bde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d2bb849fc8ea383ba81a98467621c2079918c8111ba2b4e30625240e826703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103989 Malicious code in implicit_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcac2af0d00aa7483e21410acc5434f4d2dc504371519f3a178b0c2aff39758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_hare_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da021d38c1f1f5fe6aa66c1f523daf07feb2a3b975b5f923fad76b512c3328f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-soto18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f4667b9d9cf84b8a18f48d7fde86fb6eefbf95065159b8e17bd6b6b3465148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98981 Malicious code in unexpected_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2574abe41d98dd153188f9c04ea0f2035e69f89ce5316347696d23322431325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-tahu60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1d428bf6d2d120b9094fef9824ba48b5f88942cc648dbf9a522f3ce48af0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...