MAL-2025-169491 Malicious code in uaragia-mudiffa-sayugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6839476a3ddee8e876d5d62b138e37e4f23799af0ffc43c3dafa9511e5f4a366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167955 Malicious code in teagood-yakuna91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8005ae2e548f21d42fd9cd901c6f2cbdc6d1935c984958b04d6ad9a98fd52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8debc42289eeb69dbeb050d12f91be35f66d9c848b4ec74ab50c72bdbc15582c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutafday-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82369d6bbc04645650f153877cabe29ba47cb85bd7ef25f155b0c399cd09d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150946 Malicious code in @miptaa02/sfgghhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05640315667c969dcf5411732208ea33753841cee422a6f200cc31876e082e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151322 Malicious code in abih-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c324ece74986f35d0e620e78b92958f0af04c1b47a9e10887c1fcfc4acda5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155249 Malicious code in flight-da-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2db8f679a974eb31caf53ca6ed9ea68d4e4fd3c572e107ea33c0d7fc10d1172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140045 Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146867 Malicious code in puppeteer-version-quasar-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de9ef915d03674eeb939c682418a9c6f4d6515f249cd66cf91aca1086e2a6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132302 Malicious code in broad_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da3464836d0f08edb69269558834a8a1e33e1c8a645053d9c79ca8770e02bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134521 Malicious code in jaja-brengkes84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41d98739ee674efa053d35a2dc9e73e930a5c13b25bfcf75d1637712cf4c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-rujaksoto9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4ca93594a034767b07bd6fa04a530e303a2d230c7a28a873e24f4b4fff296e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135485 Malicious code in marginal_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bfb0bc8031670fb89cd718199149355b12aed6674c530473a1143d30a0850a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-keraktelor20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e026caa0cd3500e35ebae8cd40845f62ab39bea9a3a4546ef526e716ee7ef381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129145 Malicious code in okta-gado-gado9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4c845418d6cb50407addf8b463bbd6eab8b7a1609dd61c1e948f236970b35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c742a9e4652b1e555ab8ddbddebaf2922984fcc3fd7c2d29068658b20b77b784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119335 Malicious code in curious_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b935df7bdcf23a1613ac6f65c8cfcfe3dbf17ddd760d8b26938805b4c9445e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120007 Malicious code in fauzi-kue43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7fff071d057947a9e78eb20c046c37bac2c792e06458c9019b8b964fc73e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119186 Malicious code in citra-gaplek78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de0838c5e5af7cbb4c844e8f89e885904f9d31551006525886c5f034dc81e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...