MAL-2025-89204 Malicious code in okta-rangi76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e6066e911bd5dcb5fcea6c00cbe0df1f3451d61ca836428aced7a090255bbe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-rujaksoto71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9071b1cfc6bd11510033b8df495a8f5ea22de26fb7f0a1f747244fc471e42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kue58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a38d301304249f33c6126d4a2b1466237597b1d4b1d303507c75ada5590678f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77694 Malicious code in dono-martabak15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d2252ff60e9e2eaaa17800e00bcfa61535919e9737ed2873069dc15a06190a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457e1ecc0e5489e22822ea3c0329d50d45e657a9ae8f082bd2e4e3e952fd1a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75983 Malicious code in vera-oblok30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72695cc7deb62dedc8252e37785fc67b253c8dc1c74d75f75debf7213622f7b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior-blush-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cafa567178a7a53031107dbbae1b4faa2e08f5b7060870cbf6f44f9b13b34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68071 Malicious code in equal-turquoise-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd228d559a82b995a9e6128e1dfcdf41aa5392539db14b9dfa45f998129baf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68511 Malicious code in genuine-sapphire-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168c2757df790bb5d96556067331fd64541d725fecb61fb7f3cd8f50472888f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fabb7923f2ceaf9ead3432aad99637a2fea7c3c299fac2d45de294581031cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kupang62-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2033d14a1d62b02c6e85d74fb53087852795c2ff1881541141ce4789eb5ce307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54216 Malicious code in putra-klentik63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc90e6cc48501dc694d281c9c0e2fa56bdec64c57b054430145b315958b02a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-miemee63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035469f0f7cd8d7eef14b0df6fa106e1b1f22981fb235246f379b548571e926b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...