MAL-2025-188966 Malicious code in pulsar-apollo-decoherence-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf551a8a06ecd6a92721cdb0801dcf865ffc04b38a01e16d0c850dbdb17c9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186599 Malicious code in docusaurus-titan-betelgeuse-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f779285f8402967a51b4a701f70d23e5043abce71d017845f6f5674fef4929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181521 Malicious code in roti15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baca8e299579daf5443fd9ec60fdc3a01419cbd261502556ea3f131f242edfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181187 Malicious code in @akunsansan0/batu4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d2614604929fede73a720448d1153be806f9462338dd296fe4b39f1e9e0b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166542 Malicious code in syahlan-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabb4fbbc2c542eb2e26a24278eaedacc39f028629fce7f011b78f2a9fd134cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166919 Malicious code in teagood-lokika53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee744d652b7fe41e731d9643cde2eb30656c28ea058f746d4f26e2cab784dec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148850 Malicious code in typeorm-materialize-meissa-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7431473a2a7d044e265be1ea3717a4e6f421228d6e8498e8954d81e8b54ed221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-jengkol86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f3c7b42b0cb59fe78a83d1f6e4c15bb76b72a4a8e6e2b210cf0cf76e123c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kue92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cb39843496c943c2b314e59aa97fd01554ab603e90e32676b10070bb54333d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132762 Malicious code in dewi-jamblang79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d11db5f7df6f7cee9994040dfbfab1c0f539660b0f6ca0ff054246f8ddd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121665 Malicious code in mahesa-dradag32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d1e345161cc470b42635b8e8ad4790597c0899a5dad5c7e633bd359ffa87b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-empal24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf4c3c604f8f8ad832f687a13919ee4c07d10f4b0f2fab2a12faff24da85c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent_jackal-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f08ca5d149f977be76ec178d42cd13af2f5e92a1a56596c15fe599edbf622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_rook_fuchsia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de5874812c0a753d2fd80910568924cb689aea8e0b5471cee36f96dcf96fe33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bakwan10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d468c2ce46cd2522530cba5747d3bcfc53af4bf9219a8523275eb3276a1f06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-nasiuduk45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12eb9d7c8b4b6de199776d99fa2cf56d746fda8ee948b4389f1e5c7a8bc9d05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-mieaceh45-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5b5f973eca88025d8a45d44f65a45ecfde3f3b6bf91dbda795353537d291d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-rujak93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a782cadf1cbbe26e89a287f2106d256e9f18d33a261bfaf631f4e71fae754f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90774 Malicious code in structural_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b3bee4e01fa6d10fdcec7546f536a8d06198217bbf06c9cbd96c56b09cc0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80525 Malicious code in oktafian-ruwet41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4784b6cc4cef341be37cda09bd9a258a6ddc3200c25787ed50a09e9eba2cfa0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...