MAL-2025-186596 Malicious code in docusaurus-mdx-ionosphere-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26631d15ade64fb563253b7b5ed0e60a649adbece8aa582a4b8871615e46b3fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186508 Malicious code in decrypt-import-info-optimize-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59d67888e31511b979568f205c52f652170fa14821b80328addca5fbf3deb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idlisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddffe8a09899201dad1445250f5ce219c09c9b0576f3a245c697e122832bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184401 Malicious code in modiov-kihon-afbaufcaducgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a7a1481a6230d38f147bcb924a458f39e28950f0b4e424d5fa319d9965c26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56defc26da6b41423eadaf8aafbb6f5ae4c4e231434d3bf61e89b46879522cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178374 Malicious code in sahnim-satafi-anjifgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cf490372235c2d670f481d63a58780b708b0a1a6f1cb29ac4dc462ddc33a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-13-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e41983afe1172044eb2ff38e17c1091a9fe96a5b772f1ed5ecaaa68360a9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172591 Malicious code in verts-otimo-nagigofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a4384785bf87c6d8487771f08bd638b1ba700cc0b432f27ac4011d3719e055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sariputri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f539e6b96219ca80a488f46b305555f1755f26ec8a07ab226ddb14dc734d489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gabrielsilva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeff4311346c16b41c23d7865a281a0e765123b416e9f485db2bccac38e6987c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8d2d677ee2bdb6da61c412dce81ef17ce613017f16c2868259be64b66d775f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioaluan-ofa-batovuila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d808f5321788f2a93bd95f6c904cbf70da636b7a070a2d81baa788ec6ca8d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abia-avugi-agni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7571c21562f5cae048373ce20dfd3abc7c8e082c75215c871a4758ff47f905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-rigel-nodemon-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b245c5bad420fe8b658ba8fc96bf22f6279e86661f42a4edfcb8cf101ad1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146779 Malicious code in publish-child-process-halley-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372d84cda77d894b3852a08cb80f633fcea5878af8dcb2e77b36f8b26f4e35e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kemplang46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac1a1a3de83ca2c9e31d13be2b550167f8873e85d3b3230aa9b8f2d5dedd511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132016 Malicious code in andi-gado-gado25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e487d443e1f62126eb260248b5108f78ce5746945627f09f3118c62deb2545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-ketan70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d4c53608e9b0b55ec8780574b3e495782db09c38dd0e838d5003ff3c5dd402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-saguer84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9865eaf752d92825a9c18751345b136e97ff854760d49e0758774c89653bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scrawny_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba88d3e1a1e1706b4cd4deff4c6591cefce365b1ce939bf3688e447a37045c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...