MAL-2025-179530 Malicious code in anais-papmoa-yama02ipaiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a197a9eee9f91a1a50b04236f1b22021edadbf88e3963454286669b8207d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-agik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1548c1938af439c7b1863fe8486e05bf43fa1ccbcab40bd011e746820e2f2d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177043 Malicious code in nuyar-adamir-baerdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7742cd56904016cb43bfa0ee3ac736a0f970da74bb879c60a0f19c20afbfc4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abaaaah-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197670fe847ba1a87dc12425cab5200d5f079f2193c48e0ef4c74ff2454c7c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170914 Malicious code in arshadameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d436507bae836b5f6b0b0d2f7f653a1c23054b8274e0169009136ea6953f2610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159890 Malicious code in mansila-toaviala-madiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff42326cb953f70a6b37c1c1dbf592cee365039aecccaa929dde30f48d6eae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaroha-nagamfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a48dab7e677afcddae1908835d8222f2a51214537edebca67f0146c24fc1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0959beb6f8fa6d3bf3adb719d79ece4c3d465d821de5867bc0f2ceaf4d21bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mehanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1e5db46a5af95bcf858151158aae4142b0af996f33dd73b3ce8d685b8ae8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168465 Malicious code in tealove-nanami35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98b4415217b98b388d7507ede28e87bcc040332b4e018ab67a8ed1934a459c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-xanadu-equinox-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff14de308c8079777a0324927098d34e99dc81e491c65b38f040b28688b3d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142163 Malicious code in eris-blaze-pegasus-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649ba8e5f1092cb16388028b23ead6b8f6e1199fda7ac9c199d2088db3c03feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-fornax-exec-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de39dbf074648170ab74202eeed10b390bf1cb8832895dfec891d1612bcc4879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-rangi86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16124f96b4f88d5965491020427a13227740d747d4e8c356e142825799fcf2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137767 Malicious code in vida-ikan88-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1a3d5952b0485326550c40bb50688192b28fd8cc875ed27f588f2c71478bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-kupat96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00f50bd4e019b311bd1059d03e696fbb6b4dd57f08b688e62832eabfe8f5241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071a936062721668607693162e5da95f825260789c79edf403fd0bb845e48272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121360 Malicious code in kurniawan-kupat62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750c9a351f5d3762a9002d07fa28487ba66deb5bd12e5d9fb5aa9928f5143310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-lengko27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25885a1eb6a62db069b68c1d540d0f67bd755ecb1a4ea35428f2053706233c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103407 Malicious code in growing_capybara-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa7fa83b87adb95b5e8ca21f3916c8448375a432994420b08cc6bcbcc271530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...