MAL-2025-179389 Malicious code in zaskia-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c5e26288ed6e05bb15d411e9f2d094cc2063f9aefa89458212899cb6465999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-dodol26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f2bb29caccd3861136e0e6f3ecfe5ad88ac6ca5d60d139bafc6aa252877510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab54756f00922bdd0e4af9fc35c4ec4adeb4b2c343ee6dd3a318bc7d39ab999f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134698 Malicious code in joko-teh43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a22378c3709f0b339508b32dff4428948a3e4003f5926b19461a552eff80f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3e72f3c3e6e08762e3ff7e518cf2b470928df033a094c88e82fac90bfa272a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120909 Malicious code in iwan-gembus42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75da22cc05fd7e18edc528531ee4b7a6658d505bf59fa6e39c3a2679e6671ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-jamblang14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e71ba72f3fdeeacc8e8c4d02d457169040a2ea9df79b9e0d727f44b838be8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112057 Malicious code in lesser_dormouse_maroon-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be8e630897ef315bd1fd02b39eddcd2d4ed09fdbece33be6093bb84c5543006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111324 Malicious code in young_viper-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d905a470780bbd194d657c28e493ccced2de24da1960f5573c1db217a36a8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc180d7229026e2b12a55a167648695a08bdc45e08b79f93c80038e53a612a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e1aa482eb5a9579cad48399fb1b0f18750bdc87b0a72a191161f62adf6151d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110986 Malicious code in wood-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c806497a89f89ad7eaf65a3dd76fb03cbf4a484230d4189816ca8d4ac1e52bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double_pig_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6384047d6ebf15cad19bdf2d6e4b300ec7eb37c2baaba063695c3a9a7d99241c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93688 Malicious code in complicated_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ba48f2e20cc544c33dfe41989e4c42bc08743db366f9acd17623d25c7e0e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91293 Malicious code in tuti-nasicampur30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f920a6f8f0a7359361277bf433522b168b4d120af109e68eec64dba452efdfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64438 Malicious code in nana-bakso43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb933e2d1d1ff3fcdd7bcde5ecdc3d7073d130d7dbaeac6ff729a2a77189ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989b2647ecaaa4f02d7e56c2dc843b6b24ac671e3ef7a454a409018e7c3e0fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...