MAL-2025-188097 Malicious code in module-barnard-ganymede-sociobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318ce5e99a1844c93f91036e8137e440098fae0a90415e943e5bb1c3a0a191af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187224 Malicious code in greatfilter-repository-on-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8993c23be3f620ea4cdf1b3d179ef47765d2d76f1f4247138a42102ea67ea949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgiapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c22551fa57cf0d2140fa3dd98106793e4fe9b508a5b92a5cd2e5db6872bb59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-terd-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b8a40f540a52f0b2817f90f167587e47eb21364dfbcd4a5ba4c6dc51d92621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161474 Malicious code in nabuf-otimn-gaopsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f877250960fc9abcaceb235af38bcb71d88ee9c5a47ac3251fc8bed69fd7f6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165043 Malicious code in rival-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ec67f649693af8b7a6a82469c0f34fc061667b8f26feb1b293701b226729c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144488 Malicious code in local-hydra-lint-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b2e5960bce8d385d01b183ea5c0ca4d1c4ca826535303e7e7c7c94726b6e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-mangga97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416afa28a1990e595ca707f6b3648394ebc4da06a6e3c24f03eedea100856c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-lutis36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4326247147d97df0a5a7b5b866ea58c0323aea85ec02c0ca6630cd9cbb386b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130952 Malicious code in valuable_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906f09c53aae2f1c9eeb860c01e52aa500554ecb9423bca5a89d39babd9cf15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99356 Malicious code in alleged_guppy-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8561cb3f2cc04bb28bdd12af89fb87df2429ae9eb716c4743a2475685ed5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lumpur81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f85a5f7877043c0da5b4366ebc59e9b1d4767d655b182d40e0f0bfa82c391db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tempe82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9e029fbc8406d1088a1f9a9f0185d9911bbde3d1daa35940eeeda6ffe87d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103583 Malicious code in handsome_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31798c25ca7d85579f2f081e1427b392e811b924ac06d2f99a6c07f59083db8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93911 Malicious code in dangerous_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c991dbf0878b2616ffa823604fb136bff6366fee902452c7010bf4b1ae355c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81119 Malicious code in rina-taiwan97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8bfd6ac7dfbbdb009000cd12ad1e15e3039f567af62fdba10e2a552da19ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gepuk100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f98ba44e9a25e8796e8befe2b2d266ce5151e9ea8b3595d7335de39557a5f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75691 Malicious code in tomi-getas95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08e11c7d98d666866b286014b2bad2da73d3f9030b162498961d8f3b9008feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ronde94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ac7413df54d0c1d66ef06487a2f1d9b8c439f148a87d410acf6f745769efd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-nasicampur2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02924b28837a923f1dcbb0dcdd816d0c9388cf3e4e38236a64d1e9807a4505a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...