MAL-2025-145287 Malicious code in native-cz-conventional-changelog-meissa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac21f13b4b7614fa1c9af0606fd1809d609ba57b1a9f0340f11c23f245f30b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-klipo78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16558bc9e0c56512063c24c0ffa9b8935119d0211d4fa1603d0a4372cfb01da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136275 Malicious code in prior_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773bebfc3d8e64c9b6ec51c12fe1fcb965c7c68674eaccb929fc7d60876a0ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127054 Malicious code in hadianto-liwet51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcfe89f55207aa98bec4a9bdede4ab698e9b48184c4ce93b5ceb00e7cb47b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125152 Malicious code in bella-bakwan35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7981e0ac92b3d2dd48a1cd84b35ca21c717dcfe4384d903eb25ebbfa2fee85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125586 Malicious code in comprehensive_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ace602ade28eea7cf52e14933e0d68759d764b2e73030bc84b9c97f9471776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116372 Malicious code in patria-nasisayur56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024d45dc56f806f642821a2067b18900d9e0793eedd7826163fcf0b7501f2873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_eel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d19df55344270a19c5a743c5a42df4cf260466794f7cc77bd1b009dbb1bf96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100643 Malicious code in coherent_reindeer_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90246d2c9a2a2566336379e93e4f68044f6cf38a80a5b4f50375928261286a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111363 Malicious code in yummy_bug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93121b66fbf47b369222c33226e040338ef4c4a12e2ecba2d70fc931ee4e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whole_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d677cf9a21bcba8242407c2b163930d35e6c9e32b53c17b4e7d1166818b4ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-tongseng27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be37935f7c5c2890ac28329d8329cacd5aed34547fd5a55eb77cc64b33a3f3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-jengkol32-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba3053006642b405a9d3fc6c8bcc33bffc4d8ea0f5fa378c417e05c4499df53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-empal73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e6be0944e0b60fe85a19168fcc6a63d22773fd6bcc17a7dbb2f87b80648e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kue83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21f6a442a677b9e78ab08563cda0bd4293a1c12b0636228ddc693ed94da9705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mangut17-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a211f600c06b927f8fc8fc7cdb90864bbe36d4073fbb7492deb430c89fab77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77150 Malicious code in candra-ketoprak48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cdf5da3a3cacf1706c3064edfba9e3a52493e5ace4f94a127ff841f1c09af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76729 Malicious code in ade-papeda65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d1c7d1b3479b7ee456aac1747f23f4b9f58f3906a28e1cb5af3529b325560d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-rendang38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d742f6d73fcabba5ed942fa6eacb00d0179ebb1282ebb22d5d0e84fcc16577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in past-sapphire-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db19159f743e92941f4ade673f87684ea41cc0b81272779e6a256f1309f30bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...