MAL-2025-187197 Malicious code in got-callisto-whitedwarf-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a5d6a59b64129c9f1e662025a6ba97e7c31ec48341563d9d572d474073f3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kesel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e7a67c7fc150412f352d36697db608131c4796e98ffd98c30024365d179951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167481 Malicious code in teagood-nalikami78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645c829dec4ce2d84d04876f70701c59f408e48ad7323474f561529e39f57e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169790 Malicious code in uinsnu-lumi-kunal1a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9947980c65d1403a08e602274fbcbdbb108f12f43226bf65f9e93496508e928a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146832 Malicious code in pulsar-gacrux-geckodriver-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcfe120a273827ad98cab31f158c503440f5d7151db9b0197fc91b9452b268a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22dab7e8e094f85fcb21ca678dbed9fdbb3bc23508f22715b67c0c8791ac6431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-naget41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbe163801ecfcdaf03176fe7bcc1f863fe6616af8bdcd83a75e196e772ba4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115382 Malicious code in laila-mieaceh87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3030f51be44022555c8e3fa10c061775a6d75ba659932acc6ea63ed980aaeb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112399 Malicious code in thundering_koi_olive-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc69d95414b0b1268523fa063a0b64702968cb01619c004e9f6c85b2473dcbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101855 Malicious code in early_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8946da88ded8b0ef64b544c2ab153bb2d2792f1307c292e138f7465c6e71bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109883 Malicious code in tuti-otak-otak11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cbd71476456810e4fd7ef49dda798019eb92f8d85b62337a6f0b9f00085b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84764 Malicious code in dono-pisang90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74dc544b6870b750ff0c6432cf48082c114e49343db7df3f5f1927162e922136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88388 Malicious code in maya-rendang39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236a219b68da69a43ec78cc994ac905f6849c3286a43c8233228669bc64976c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83509 Malicious code in bayu-keraktelor14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d5856e9f1c98b001cf095277a2576671f4472ad6e1ca1455ddfd8fab89fbfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70729 Malicious code in sound-crimson-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3217d5a6e64926c8c698e2c93b1d3f2516e9aca7b26d4202eb3ca167b6e9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61290 Malicious code in simple_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69e609dae839cbd91af8559562b1bdaadfe7745c76548c12627aca27202aa8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...