MAL-2025-168857 Malicious code in technical-albio-tolimr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d293cb8e35e146bcf3767dc0a03c97729ff1db3b374196adaa8028e55f131ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151357 Malicious code in abina-amoavugoi-anuinahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1855b02bfe5ef794645a13cc623106e9047081b29e0921c8b325a23d78de911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-config-electron-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3075d940b4cb7305a807b21108734d5b68f8e26426628454d4345e25a3851c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-geckodriver-less-loader-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e7ffe9e4024063c41783a941e17513fc2266685fa86e77704cddf053a63167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143828 Malicious code in janus-private-phoebe-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e39b17f67223220fe63d32875adfba39ede6a56f0af2b1cac86d9c7bdb1d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139517 Malicious code in apollo-jasmine-pegasus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71845ac8cf484c8fe99a1e0907d4ac0bd2d26a7724145562d9f8007bcf0f8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984c2e67b2421782d1b12c6fb2d75991d7ab89e6fa813e331e9a72f96783a2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128801 Malicious code in naked_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3beaa875a35aa89508adc2bf97f4ad5b83b9db65511df4f673fc1a9f2ff3d8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129060 Malicious code in ocha-semur62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67ed1492b4737142562001696e7617e37b3163fb515f6172b5394cdd6384381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-keripik2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238eafec8cdbcdb9c730806716a822b1b1de202824fb3651bccec72aea2bc516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121784 Malicious code in maya-empal58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3ab191b39f86fb7db9864babefb40b11dcf8f31328de651a44622ec95d067f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124554 Malicious code in yuni-kemplang48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d446d0913cdbe55f58268334a4698c1f2836341930ab21eaab57660690157778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115998 Malicious code in net_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9e6f8314e73b883c3abf4bddcaf912121bd12edafcc96045369a85862a88d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116659 Malicious code in rational_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6904b8d5c2aa7d9683688b65c8dee1b38c92016753166889679ca66cd62542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112243 Malicious code in regional_ermine_white-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503dd81eb73bf7ee86c1113e7040e199b18410b06730ccc4ae458e5289429e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105321 Malicious code in lonny-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35175fa57add75998fc885901fcec2f7eea5c526b7e29815ff1619a2c5f1e551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109931 Malicious code in udin-rawon2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcc7807903e1f95a17a7cc8d8c0f0a684d30507ada65df8c8fb4324daebef20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106531 Malicious code in ocha-nasipecel35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433305fad00634769e05edbbcf50bc35f440512ccb87b4538130edced927cce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful_lynx_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2803fe703956a45365f5fc8af19148a04c9c2e445d4d5f17615b366100980f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kue58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a38d301304249f33c6126d4a2b1466237597b1d4b1d303507c75ada5590678f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...