MAL-2025-183501 Malicious code in lobac-uibg-abufavigaaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da3310245e6cca2c71dcc87b5a8dd2f841748ec97c9e04d235723afb1696d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-sat-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e336141c7a8b6d9d7fcd26363fbfca4d7a28ec2411a0205027d6d9107541b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6738587f0a97156be8cad98e461e70147caf89e4c030a31e70f17337c7149e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rdagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dc1c3f2ef6222b62a4cfd19ab4e3284646f3248057ae85ce94aa973c91447d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160296 Malicious code in messi-buysa-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7893fe0873ac77701c46b19138ec843951e16245e7e41f3a3999512a6364a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-remark-sedna-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d0f28c1f7a44b41df0915d34c5170c7bf19f26924f8e1e5a8dee238cdee1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133313 Malicious code in fadhil-liwet37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7b31cca0be9400ac411cbb9c0a1d93a617887771fffee034bd256bcf39f6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133960 Malicious code in hadi-ragi77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf3ad5bce5fa2d9ba6779fe8b90c0559562b6945771603865af09054919a5f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lodeh41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123a73524ae2a41c6b5753571eb6e947e5e9deb869f0d8091e22c1b526e964d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f28261e26b1a82a2abb318d13a2c5e7e77c7fb4c77e5df116754341c2d160b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dba688caac593d3d94f1827e1fc91e06659e3760cf502d51211b0646ea6cf1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99417 Malicious code in andi-bakwan76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b83a9bc44b82c0a13f1840288dd8375f7debde0d0db2f0b85d06c9063867ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110220 Malicious code in uptight_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04911c6d758a236dc3996b90b67ec096ef60ffe1bb3098c1958de402d40cc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-sego32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4dc03f8437975e11a1b645e7cab3853ae646601310e312ca877747204e53cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kacang18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44482afc4489570066ca575e60edffaa60a1e3c48db960491095a3cc028e20aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3685896e9224cc17b2484237bb204e69a02b9d80bba89718040311c9111bec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78728 Malicious code in head_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29212117b88214705e285d55ebe8bc1015d351a5ca839f48212ae761818d7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-ketan45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7265bd4e8630c066744ecbe20b3173b34ba9437faee5442e9446a2590a0bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54220 Malicious code in putra-kripik37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cada0ec5a0223d0ad7ad02313e014359f92a36afc5477d9ffbee6e75dc7f8b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in onmhfzteqydkxlrw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8940eee28704cda98dc54c7b12f39d4e5f61190a16ece0029b08efe4f673ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...