MAL-2025-189918 Malicious code in thread-compile-parse-decrypt-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7146ef933c1aa178443b1e6366208057596a2447d96deb31dc0f893f501187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174013 Malicious code in diva-tutabi-ivabagau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecf157c5fbe3411215727f64f2022a8256fca115e02de8dcdbe35bd9368b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yazidzbzbxbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6300c50a0acc35f7a2653cad39a5705aa4167e560d61a0b015bf61adc770d052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butarsui-mutfru-mutyoaoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bd7d73f230d7a6b2974a1607b5c13f61d741dfdb6df51936446db0db5efedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-impulse-event-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0977a44abde184dbc3739dce64cfb2eb95d5e7cbccea10e59d54906046b6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-ruwet16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de4a0afca0fb64f0bd93dfa5b04341c7184be41d4b81cec0723ef9dbdb99b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108344 Malicious code in salty_tarsier-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e2a72b3e55533acec13dfe16592140ba6d9bfda5737b701521e3684f7a1816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-gaplek65-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f32166df99cc5843aabae8de186396927c7af39bd09e74737b9c869edb5d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-otak-otak91-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aacab2a447d963015e22c3e977849441346c26153a06f8c69298d732b951706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-blue-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee051969fa29062a65d5882b966f44687cad2409319bf7a7c4a36f8e515cd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60789 Malicious code in loud_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448ffeabc4e66a37e11084508bf9423da37cec233d757198ed796f2503e07e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...