MAL-2025-169069 Malicious code in tehah-nuyadtg-mantan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660dcc4e88b7be4e172c479bced4c3d06f562857c456c51997b6d00db6c58395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143456 Malicious code in hydra-semantic-release-flare-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138407 Malicious code in zain-gado-gado45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dd1b38d933f73f866fca78b7eb2f0d481f48a7fb87f9c0e13c75dfad007929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133464 Malicious code in fauzi-nasipecel67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e711cda546f45d93373c9552261ef833732d22132afff23cf483bc0baefa4f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130988 Malicious code in vera-rendang4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b838afa185d85de018afa57572c686d9668fd521510994992dad3da7f448474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kemplang64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0c2a245482921968e963b6faf9e1323966997f56597e7471fe5b5978dd7fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-klentik30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808ffd7380d5c8242db135726905458bb99c6b54c628fd532c4d5c79a9abe821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123677 Malicious code in tomi-toge87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e4d91ffd676ba2c8d9ead61d4ca843764098c608f0363ba257e0f20bd7bae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119128 Malicious code in cindy-keripik39-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bbc858c756fa417a862c3ea72a85adf386fd4f6da38e369cb59f120fe551d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91588f235be75f5cd4baadd2105999f0ba08d36ed079fc342285825e00f57f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112882 Malicious code in bella-rujaksoto100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c800099707e70dc15f822b6a142555cd19c00d44e1105a26d2495b1ce29a592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116405 Malicious code in planned_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da541eba992d22ef2021a1032db2ccce6cfb05ac78bc8fa458f8b22dbb9ad51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-ketan40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70516bc64d399f29944b26a71005e468484623406bd691a982bcdf95a4ff232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108631 Malicious code in shnhof-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93915a84221d698b7cee08245f152f6494805b6968d0e334c0b999323b99824d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110811 Malicious code in well_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a668af6efbbb9bcaa4457fb2d06a9926ef6f7d90d712f28ca08f3f34099a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-rujaksoto4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bb985b71cb4c12ff6987f59562ccff672f444c23635c547c9a5a0cc5cbd5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tahu13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8dbaf47e069df88ae5266be97896964809e83bf62c8c6ce4d464f6c35d7bb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88809 Malicious code in nina-lapis26-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4e0ebf7e02f466f284fdc61677744ad7a1fd749d81fa54c50f72d7974c1c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45ce84fb26c72a8acfc8de412ca60803ef6ecf9fbab8860f5ef21f748976014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...