MAL-2025-187813 Malicious code in lint-staged-inquirer-transport-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbb20d4bd0ecb369e109ab32d36b1f7d0610fb45df7d23e8f9bbf0db5f3c22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oagfafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16473925091256af5c05ec9e2288cb0f885b49a61edce54016972efa0929a678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah12-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feab06f97d7e11742e1497b0e54caeb83ab399e4f836bc85488d19d9e484504d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144519 Malicious code in loglevel-rate-limiter-markdown-pdf-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df9ea4b32d4c9b2d2ce285363f2b37f3939d71151d71bbfea24e5c4bfac821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139097 Malicious code in vertical-crimson-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3c74559c3b3550fcaf2e322a771a25d136c04e8e12f1335706771da8036c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136650 Malicious code in rifqi-mendoan26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123657a4cbc5ae763c61f7613d6c141d83ed8cd60c1f2aea01e7acf7a01fe1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133295 Malicious code in fadhil-donat13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df86c68908fe42daa7e52427560a176a3b23684e2903aff0812210a950535e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sambel49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b121f21c3e8c49fba30a088577a3fc3cc967061956575daeec4289e1a756c095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118837 Malicious code in bambang-nasi2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8010502fd01be1c5c739255863b80b37aed7527b37fce5521bc75f5fcabf33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3991d921a37b666b71534df278de97089071c761ff5769c90e3afe932b0cfc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-empal29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36425119991856231cbb9e9cb321e1d16fa14ddcf07a5ca695ab35e58280d596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-rawon35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9475fc50b21848225eabbaf9a01875e71057e1c8e7aefbd4fe2ab2b192f8ccea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799ad541db5c03b3961772217b80a6a6912deaab51b5f2619eb380bbbb133498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-nasi6-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd790bf83124ee626f9fc357751acdd969e85b909738338f817a19dd70e2f71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-lapis71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aacf818ef2b6c84ccf83dbb497cb8579cd560406b54448d99e33df5042b881a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-mieaceh93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd77baa9497d71ed6bcc87f37b9a1a5c6d50655e874905aa99e3317c1238540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69229 Malicious code in loyal-chocolate-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c78aafe60d51c46f2d6020db72b2ef107eda61abc83946653ccdb494f9c3d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54435 Malicious code in putri-tahu38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b15eaffc3b45f0da2700d2cc88a7e301b38d7d3ffd6d1f359b2b11be7202cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...