MAL-2025-156919 Malicious code in irassdhi-sedssad-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a414f0dbc120caff5c0156ab72a37c3a1a181cb953d89bf146fc282963c512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164720 Malicious code in rino-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef6fc654843e612d47953bf0b47da5d9ae9034a747cd9390d9b56c3ab786ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153727 Malicious code in billa-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b80ff63d669f5830affad471d861ade73e6f5990ad1aee51ae5d6f6e554c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167366 Malicious code in teagood-nakamala96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbcd6f1263106ccc6ffd0d08710ad105be10461e8b6e8151234982cf1b4f449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-run-script-chariklo-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbceff9779dbaeab7c032e371182689bc834cf52fe500c6ef39d7e87ecc0da67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-ophiuchus-indus-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d007e985a3247da7668e6a5323b5a2600c9ea75aa3ab5f68e692cace8f43da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141270 Malicious code in cross-env-sails-pino-pretty-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff472b53ca019f8b396f192549d6ea6ac94ddc96058c84452a9ba0390ae1bc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-protractor-npm-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f75328c3b60f551922c53082dfc1c61f9372109ebd52c544380f42f1c95a86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-donat55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5075ea0701711288208a674f80d4afda142902322571f02946d99a53ccb11cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-mangut98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900ae839b63a703b53fed542476414f1776308e9bbd8effc1a2c45b5f207d16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-rangginang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85db38f6e76cdc3a401bc0b5a77ad5a5fd80ccd879a0cacfc784ba96d3ddf0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133841 Malicious code in gita-otak-otak5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07d67d192cca6c98400e679f126e00bc5bd6096ac259cc1d479a9d2dee91fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64890683e8a69e79e9e6cba18a4f35018cc8e6fae16dfd380ed6bcfa18ecec39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cdf5632ce436bcc58b7ab0c6552764dfe9f5195c9cc6ae4501f37de6609f1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129181 Malicious code in okta-nasiuduk48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cee82a3c8638ac3d8d622aad5cd76e3a1ebcfa46266af57a32b85c5aff0900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121216 Malicious code in kiki-oblok80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164fb7d99a0a6521d525be12d570ca9dbc9c369cf6c0b9003179bb09a10311d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-ronde40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd42898be4b2aa8eec82bdfd2cd08cfa4080eee4aa3e2e5534f2c3faecedb7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116771 Malicious code in rifqi-kripik93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55220eae5e9f66a21668edecd10dcc53f989908b075947806ba5f70731203927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c9a5b273c625fc47132bd8873f6d36691f9f5b8098e4f7f2a7927b1c9f970c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...