MAL-2025-155536 Malicious code in gurs-miptahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d5db92bb9d76b904da5ad88a89c6315611e2d23ef462c89759ea36e55b340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156309 Malicious code in ilop-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ecb2b77ac2a7d3f6932b83e0f435777e3e32b0ceb1de27aa007bed3886eae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safadi-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3953f933fcd7e4a2a2f58af585d34108e848af22de0abeefee1d42e1ec47a28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168410 Malicious code in tealove-nameka28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212e23350ff834f687bf8066f645aebf298a13e7e227ba6df6a1cc3b3782ed4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166814 Malicious code in teagood-cuekin48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46aa89414aadcd9af62eaa183ce815cfa4d1d50d50a31da751ca20f89c2c7ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-meteor-start-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f41c156800172217496004b04bf2c1dfd2ae71f2073b0ed785b6ed6984b299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-parcel-equinox-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fea44e964513c03fa384cad1bcf592cb72c5c8ba8c2376c970550df47171932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-phoenix-bellatrix-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce266d563d5b2b900c4c7cb63fe1324d5f2f43ff6fca843bfff590fc2a4e0423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-pino-pretty-parcel-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf34adf731cd0173b3fc913fcac4763e84f4cc5b9fdc9f8f64557546928e3e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-thuban-child-process-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69434b1c25dc4427b5759fbfb809886fd0b6b03c34ae3d2899345893727ae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-auth0-quito-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145c79ceec32c65c847140e686b61ce1700a24f7fee1a9f134747f3216bf8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138837 Malicious code in liloyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc931892e1340a03042f91e1ca48d04171168fa64ec768aed1aa592f2efd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139057 Malicious code in surrounding-olive-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b64e4a56a725b2726b1b2ca6dbf6ccc1754bd55922937806bafbfc7344cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135584 Malicious code in monthly_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37994dabbaf3527d00ada00989b8214122b9f8ee1d35a781b19c04c886a9fd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-nasisayur54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36d644b9a82781e2e79fa95ded1c15aa8c3ac7f6328ee136290ef75a0d9ade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-naget70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6b8d9677c93a052390b7fd805cf20190704d79c1c253802ca3cd940377ebb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132262 Malicious code in bella-miebogor26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42fc144a1c8c78dbce54a01bed05d522702bdfc27556f0bc869932c57af8062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adorable_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a7c8181cd30229f4b47b037194136cfcc61a10619e4c191fa0fc2137ba02b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f9e2b6fbe5892cafe833a85879e165bfdaa5d54010a82722e4f609ea33bcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137524 Malicious code in umi-gado-gado61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa349fa626ab79fb94d4fac8fced41d0928124c3ee039d6eaa1ad59bcac0c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...