MAL-2025-186619 Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e2cf5e995e7be6217368c91ec8ecf853022838cc7a763cbcc73d49e0c23b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189998 Malicious code in triton-nconf-sublimation-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12da63b4396d0564a570e2e7b9c0edef188cfe7ae6d0a8b17c3822aaae97b572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inflation-antd-dependencies-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc48f01a9a0590b795023a54e9c8d0d2e398f6a53275586aed013f9c52e6719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187239 Malicious code in grunt-bellatrix-less-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a265433e400938b3a3824f9989743cc4d22f5b9a85ab90856ac06d2e29d757f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289593d1ac24f278b6c055e5bbb16f2f22c7d92f89435264d3deaf4cbd9f729e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184120 Malicious code in mlokok-lofeki-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb3e5dbc5200a7a3a0a84ce451b7b292de904f562fc3ec549780705c1da8c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183297 Malicious code in kiudt-acavog-fafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4696066fb5855d6f6655e40f0709fb4c1c78987d1e577acd2701d7a3d8d0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ovituc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9459c5b87393338ff456371d99e80b1e1dddc70264edd8b4c00e048a7a624a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179657 Malicious code in kisut-afunig-amfaaicamicufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574827a09ea160487f039bf1d020b67097653fb08db9fc948f25b1b9fba9b614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-treds-redt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86057dd03d9903de69eeeacc63e64d35553e69982f551188b0953b0e484dccc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174791 Malicious code in hokage-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042018ebe8dd474c23147d714f5b0a2e883b4c3b7b9e19af096a75dab87e577a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174477 Malicious code in goodain-nusiautua-nutgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0440aee00853a9a493c7a14c5b5dbdbcd5d3041dc2b2dfb39c2563b5d18bd885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172856 Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174623 Malicious code in hitachi-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11f0ed71305b534c2129db88a11c9d7f4b4c752bae950489a2fe6969443fd56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a913a8a62c00e88c66e91cb8794c954d70b8132491a712e0ee6035dc8e2b1c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174518 Malicious code in goodfiun-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d23066c70599ac685e7486d16060f5696fb30ac2fcbe385a1cbaaa333ef6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173724 Malicious code in butauahur-sofaiui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0dd227ece4ee3d7e88910095e52bd816310680ca179369681c6f7ae0b3eca48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bd7785c84fbe79147be2f606bab5a1dfd83189af19dcbbbcc5a52fcc6283fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indukhanna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbef1091f78360e62ada3fe8216bbe3c926ba09e0dfe68ac845be38ffc298c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157626 Malicious code in keyla-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea60a81b2202c493bda0693c8b9de9a403af68a379079d3a742b116655f357a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...