MAL-2025-179037 Malicious code in terui-umur-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932373ce00cf49d74f72dd6886158b5aa409ac517c6985d4ef3b706b99a2c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173119 Malicious code in budi-kont-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e98aba16161e873d6867f050c544f791d91cf8c2556282e5a910dfd9d93037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-affga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bb68792566e912860c9cb9eea0da3c9449f6980282e1232620c2edad6bee9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159004 Malicious code in madrid-ucl-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0527b191c6c44cd3b4d886b4f2eb29bd8a8251b36514401f864066fe0b0ad7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159085 Malicious code in mahnud-nofity-goniefga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add717999e49c8b755a3bc21155798378aae0bf256caeb942c9abe4775e1bab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166810 Malicious code in teagood-cuekin44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3857960a7b5e4e13601965b288e1216f784c37511274584763c29ac6f2c145f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-ssds1s-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd8ff07ca9caf63772ea862595b881fdf36cf9747cfa4f5443056ac38d218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f9ddfd8c9ad70edb9a9cb8156b521c6fd65c34dec02a01c6ff4356cd6180e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151715 Malicious code in aciydua-idusust-daru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05f7fc93e46140ac77c1ce9e76a5739000de902f07cdaf10bdbc55aef5a72dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164544 Malicious code in prayoga-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8b9fb8f8741b2d44ae48ad0c7f310410fcbd536b2e3bab03904eff13f803cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144158 Malicious code in kaus-vega-oauth-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eccb7ff3878e6e3a8763872691dd769cf8ba2ee0a73255029d37d5963dd2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75171bf41f9d6323e8da8690e976b0fde84e1b27555a35b0af35e961f43f6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-dependencies-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147324 Malicious code in resolvers-forever-grunt-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09265b46fdf433576f41f7f12ba7ef773b4b643027adaa79185d07f1850e0e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lontong89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75615caf2f39bd0b20177bae0c8f173f9c107db2b50d97264ad425db255b7a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125846 Malicious code in dian-kue54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ab7310be83dcee037f66032dcb5fe973e10aa1d50fef8e4862fc83c2ac6188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129987 Malicious code in rudi-oncom92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd0d174b40e2d6a528e1130ea174237bad2d16fb19291d07cd54a1988ab6957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disastrous_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d125065d76e1b0cecba808004e7d9848c616a003ce44e767c45b8a4299920435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in katrina-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b1842354897c841663c22e81cb3f7721868655d7ee59db9491c3f908de97b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...