Malicious code in try-benchmark-assert-module-protected (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de000d26f24e3e19f3f26d9ae4f37d14f920af6a5f0e283d3985c12f1414f4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188214 Malicious code in neptune-cryovolcano-dysonswarm-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f65d6b8e5c42cddf9286d718e0a8cb42596b67738c40351857045aa7c2bf9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179451 Malicious code in aiboloa-milomipe-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd30cb49debd627aae49ca3dcc10e9fd855f2dbbb73cd4e79b19110f6c9bffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-nusadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ab28daa8137622cc76bbf2bfa03a98209c101b1984f0fe2b6c69d7fa40c93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163154 Malicious code in nokire-namiresan95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56d41849178ef4ec82840447302ad1c3ddedf241453f7e64e1d40d1e52b2cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-c-brew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afc886098199a31cc98ad8d4ff2f276329f82e07012c8b0cad40146d574b4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165208 Malicious code in riyanto-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafb4ee2a48d34c28af3bb4cffbd83a3b40bf75cae28fc29c78fa2b0f1aaf9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960273f881c41ab1fe698040d09512c024df6788f0fb300c78eb4682bd85823b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-husky-kaus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f5507ab2a765098b7094518c0513e392911542fbd29ea2b6ac804164375eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-enceladus-oauth-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975364cd584979fb854f2c748200a3cfe076aa7bb4f0fa02f2739d144b73a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146249 Malicious code in pino-rate-limiter-nconf-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2007d321e467534524557879fce285a8b90bc93b51de29e08cc7ab4b7383440d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kue35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aba95059a420cf07754a6336e58fa3bd43350dec0d9d21b844336b928aed310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7126afffd4cec2d0da38a07199d177f312130536729349bd5327e2e78c81b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109543 Malicious code in tender_shrimp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcc63577320e91bd141fe6493f4e60fc31f7116d405a295e5f9bf796c61788e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106331 Malicious code in nina-lupis59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce4430431d1c49087630b99a7333fea7a269660ffd307e4a81314b06a3cadc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91985 Malicious code in voluminous_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c2b4f07dae24ca6ac3dea75604974df99db556705d6f084cd91c7fa9a5a9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60818 Malicious code in marked_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5db9f4038d8e1c1ee3dc162d4dfa9c98b88b1e394e2033099f59bfdec5f52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-keraktelor9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306b1ebd37eaf2695312afb672ddc0ef6590159482d42e856625e6e1956f9223 The package tiara-keraktelor9-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...