MAL-2025-189072 Malicious code in radiometric-proxima-ophiuchus-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e4cebbe5b73c636c28c777ed6499e4fb906fcc3ffa5a700a0f16cd85821770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuamffoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5760eae659fba47723d88f4ec100f4cf544f5522f5f2dcb17e7c4e6ccccc9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760fc35764b8672f159948588133673e83cadc18879c568c392864d3b7e9199c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180736 Malicious code in teate-thy-sonic-nesba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4266381f4bd8f22e37d6a50ceab8021f24544df121cb054aaae0cd7ddbce3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c21098ff9fa8981f1b26aab19a78e8c0e6d1ceccec3a7f1bacf7c9c7bf840b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170748 Malicious code in ajmalfouad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9163ecc9f07a4ef7b391cee5063602a03f2d54c45d0fca1dd230f2ae854b24d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-minahas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a32646191fdb5229e4e00e2c6df2f54a17efc5ee90409a6bb98b30feac76a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167361 Malicious code in teagood-nakamala91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2482560ee4c329ffc26ff2d47ae9751fc811d2cc71e925f4eb86ff902f734a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154625 Malicious code in dian-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442d76e901acec667901b0d1c13eefc9e266de805ff706718cc7089ea8e61b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc738819e624c0c6d334d661ffc767cc7fff6e89830698b2a71644be78526f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138746 Malicious code in furious-coffee-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f34ba239c827981f1b70d30d1dc39eda68b32d6e379a238557ae9cea6fc1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ce03dc52e950103f5592a38299827ec7ad6d4bfa8876bcae14ded200d211f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kue62-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46257e4804aca242667572745c48a407eef0a499047510eb34d099fcf53a80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122906 Malicious code in riana-otak-otak47-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df80c59c1db2fade7aeceeedefc547f4420bf1a3d1129cb7fa5ca094341b13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d089f88dd1ab2ac26a75beaeb3c65cd757986c62b2aca65211c837608eeac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d23833f480b4777fea6e5d7cf141a3f392fe33e7d0c2e02a0fc06df1eb843e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105672 Malicious code in mature_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b404f0525822d1d98de34be15d87b7371f9cf730755952f2bde323242ef8803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stacie-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1137dcb176d97c1d660a7212359165008da0e835c907c736cc3c6e6d2318e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-oblok75-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70b671333ed79a964db8d0e38c7e2feaba52f29ce1a9cb6a75d1e17df41176f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-otak-otak81-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e80f82730acfe4eb7ce3fa12388cfefeaf63f92f313134c22de0f24bf6cfbe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...