MAL-2025-186166 Malicious code in cli-holography-bunyan-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99709cf279a1a0f87117719e8b2cd54765f1b9ed84a6db8465fdf46399aa064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187081 Malicious code in gacrux-dorado-impulse-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65b3ff1c02ec4218b6d3cfd1acef8705073c0a75768296613710e6fd716088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186447 Malicious code in cypress-enif-robotics-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49d84ee8d80414f9e2624545178e0888e208b9cbdcff9007d1a5f97bbb230c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ateefshaikh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9375460ec892febffb550010b8ae5ed22c7067e3ae435152cdbd35b77a50bcc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161908 Malicious code in nasrul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1224952a057961e451cc2130994a8e599b8046f301712d288b7d3ea15ad7e339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinnhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db62856f904dea1439ddba3ad72277211a4ec64e2f3dfc674f04c74803d82650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a335f9b0e97cb47f8f77f13534ec4071988c6ef25886af276ef34172e20e1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155616 Malicious code in hafiz-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e32acfd04b1b18ee1a069193a266533e00f5098f72c976b09779f0bdbba187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153009 Malicious code in aviah-afaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031c2e25c6ec02da64071a7d88603710b1563a0374c5b188aa2d52029baed2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-nodemon-sedna-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7316b299b527b2a7aca15f930a3fdfb9a75ba8c6418bd1cf9278ef08797cd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148340 Malicious code in style-loader-rollup-plugin-izar-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4a0e6674e333da99262c9589dc038cd6e957c309248b12349a0364661a27f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147451 Malicious code in rimraf-kaus-despina-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440575175b8259dd2dc93390fc2ef519cbfec2dbfba191535b58896c6a7778e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-neptune-hexo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b69242a0d3a551a4ece24470a94fa434599d54aac33ce7b8b2a54ea05645c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120041 Malicious code in few_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ed54736287fcec49cd918d3b57f8d288fdb679d0e17c0f4631a70492c53c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sasag96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ed30aa2fe03d9d3e322840cf568cadebe2ef8ae4038507216f1d06eb174bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5dfab8533c8335ece2833a39c7059dbe10031fd4fd1d533ff966ab24c293e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83366 Malicious code in average_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583e981816b5f3a9d7975130e9c411c782142e463333d7bf7f9f97595aa23daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87945 Malicious code in lisa-nasisayur59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46303bfaa7f5251588110513415f813f7b69dae41252c0181925863bd3bfdbcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90450 Malicious code in secondary_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f7a4eb8c4483686e76153a920d1fd8f34ec73947dcdbeb756c0961dbdec340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tahutek34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d413b84cc20b0ee7b0a163a0b678bbdff914300a968b4eb18f49e16dd0985cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...