MAL-2025-173998 Malicious code in diva-tugbai-imbuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb57ff9a0a4cb93ec0070cf1b76e4029ad32c939947f1626ff83028b1156285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172514 Malicious code in verts-otigo-naffoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36bfe7f50e03e17ff015838c9c0a152b6e53650f9b4df4531b6746cecd569a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfba4b832bf953d69a29b837763b5cdca3497c4b4bdff641473e4d76d2795aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163549 Malicious code in nokire-zabuza58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec0329741f05a3f95be550759a5be3eedf3cf85e7a023cabd46dce296032d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-spinner-google-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbb62fe13e1ab017999008ae2b7f567d60822315eb71cda2bc05b0f3987ee87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-geckodriver-helmet-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50446dd6e6813c18d1579b43222446d56e159a08a2996fd8a4137a669722f134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-kupat33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9bc52f177bd818c74d0c0f5dbafe443600541d79415b8b52cdfb470c53196a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e61eaad5f10168c78d59cef86244dd92929e2933d8bece686e3d647665a6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-kue81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7da2b42257f55b8722f0fac41ed5de8aa59f2ba634deaf5ef0a0ce89a18a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-takokak43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8048bd3b5434ff0db30bb031170bae9310161ca6a1810ce0c811a9943a655618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122309 Malicious code in okta-kemplang49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb59b7d47e3178096ca8d59b30e43ba9790274447f8ae37482ce35ccebddce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-takokak34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e24a0140606a954ab2a2a9cb68fdce587f1b12b752b37448374b4385d6697cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reyna-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad5e235834b64bcece45acb1e7783a41b8c12459c3dbef75f497095ca3be0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108780 Malicious code in siska-nasiuduk32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281ebbdc31eb7b26f3cdcbf9cdcdaae51710ed9306e836ccdeb8065c264a8056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-sambel12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e68d32be1da65c5c6e43f62e007283eb89feb4c5392dfdb5197e3fd967f3690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-semur67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978e841019e4e082f1538e48b5e1d5779e8a17ed7eb882daf8a503355ae4f4c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-papeda68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22ab5a324a047661ef0c49791c318160a54f13ac34b83bb0615849c2b0ae6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74261 Malicious code in lutfi-tahu62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b972cc4b9182cb223db6401b90eaf240e1a3fe5d578423c746786cd36e37d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66096 Malicious code in wawan-enting66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4131f5d00a2b2ea5670c6c0b3db130e1c8c72ca7a4a56fb63edf6072ec76fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62705 Malicious code in eko-lapis11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbdb6ea57a43732af779c9433412a01f424f9d59b63af5939f15279631cf69fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...