MAL-2025-155826 Malicious code in huda-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242dbaff5902db0aa57180d1ec61710eb9074cbc4103fee0d1d486f24d41e0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160994 Malicious code in muri-nddsyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883768f035dbed598e854cf0fb5c676da1b7114b0226350eebcfdaab1c3ba313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159602 Malicious code in mand-nomi-muu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b58dbdc0d239b38d918045663bdb620cdfbc68d576f5c4d336109900e0a08b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154674 Malicious code in dioago-kamo-alau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb387db93ec59bd4f28824c95263e57726a897f79838cb9349130ba6e84e812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-slides-hermes-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e63cecb4f67a5cae4d7754df39a7799fd4bef7fcc25844e5a7c576e1e31ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-meteor-hydra-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33770dfbac66ffcb26f1980fbf651debce846bbe4d0a6c950d36e990f3ca549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140110 Malicious code in bootstrap-janus-spica-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb8df0cbaee112cc2fa35b1b834732111d81069400cdaf6f347189357c40e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138743 Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134826 Malicious code in kiki-rangi79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ac4f477bc770a67540efe597af9d7aa4719aacf3f3b99084c362de98f2a675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-lepet55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c73b22d6906425b7111868ec6f5e172e2f39da269a08100e446fbc6f73653e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd3fb338ebfbcdd20382cc73107f940d3145ec527c3c75c32029693e76803ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128952 Malicious code in numerous_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3166ebf21a3243a712bb2c6b1a3266a4219448df05bbcc05cfd67478de55087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129215 Malicious code in oktafian-klanting92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aed1ed1936d72c40c76d56def9cbe23d213a34074af007cb5decd0a8c1463e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131826 Malicious code in zul-klanting85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e215d0802bed45ec813ef51d4fa72a51af24547a71c85dc1db77bf254c736b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127927 Malicious code in kind_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68529646a921419a257d8f4dda66e3edb49bfead867c70497349203f6b5e2e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125440 Malicious code in cindy-lumpur72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c841b9914fb1420b90a85f7c06b756ff2911ec4e423945d72707f0d90f7b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-liwet17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee42a9bfcad94b553b3306e52c82215b8e09f7b7e62c736d8042403450c8ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-telurtahu73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391f4e2de9dbbcf96a2a5a686d03eb224ebaa52174eda99d1bc3fb9c592fa98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115031 Malicious code in joko-lengko29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd951d72ffbf1818bb1f5f84d88710a2fd8e07167d522a90e03c9d94864c660f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...