MAL-2025-189016 Malicious code in quark-charon-hercules-lepton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8473c670a25ac2c4782e9d65c46e0a8158a9769fb0bb2733da88072b9a7a2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186191 Malicious code in cluster-wind-decode-sigma-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89e6d425ea10a6bbc7c23e11410d5d33053239f7ec72033f36de7f54628073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkiaainor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97313c25d17722c90634852a715b6148c7e843496cba5a293b1c3a0050eb51c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafsi-vaidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad90022b1be8f667556b1757abfe73ca0a3412dc2eb5f2e0207ab8637283c66c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fahg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c016b6e63e41e6e44a3b8d1b200e16ed6784f28c98ccf8e28a4fe8a0ccbd26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7575013590cf64fc252144dd7d1a54df30f2a517ad248a0fec6b8784dc02e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-fimokafiganui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d697ad2c99c090d841462491633e7e875e9665088f11e82e5aff6dd8eaef62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156797 Malicious code in iomodra-forufuai-jali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b4b85c50a53db49300d8ccc261eee877fdae77d7ee4dbb963dfa84907647ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149952 Malicious code in @mipta1/aseszwasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0c5389e5a5ce2f85ba640336debe4b4a0d0d188800e636400065fb9e2a9994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149110 Malicious code in venus-exec-sagitta-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5652eb806bf9840e686042adc13f54c667dff2f510804fbdd19f2eaa4763379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-delphinus-farout-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f370a395c2d47ea909b67d7db2433dbcdc997442f2a384b050ea0c2e241a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-scorpius-mdx-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc7a21c4963dc60ce68de9cc69056a821e1b943c03d0a1cda2e6c27e06d667d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145632 Malicious code in non-blocking-xml-procyon-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0a264027b7585c64463a147d401953cef73809abb5f32ecf3d768ab2c538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136933 Malicious code in sinta-jamblang80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1585b8bd794d863c26ba7c5dce859afab8db975c80dce3c42ac10df113dba2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lontong38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb16d8068ef41d26a856f38fc923f297c66c159ba8129b6d322eebd85b9a220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126348 Malicious code in fadhil-keraktelor24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0026210c7334eb64532713c408b0747702d3e8cdd73bd59550951a8c1372a03b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-bakwan97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f103b52dd3fd582d30738aac94f0c977770bba422b0b46e1282fb0ac0d10bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125998 Malicious code in eerie_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e67b3ff14d2aae959b57ac036fed715ecadcda897cb9f851ed91710599429d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122881 Malicious code in riana-kolak7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628c2cd30138c0405824b7187af8cb14a4c326b617c0d6c1f54261b2d5f8ebe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119195 Malicious code in citra-lutis16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7497b9f9cbc8b80fc96946bb04a4e33164a2ab253e7f9897cd23679c7b9b8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...