MAL-2025-132902 Malicious code in dono-lupis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0e57249cee9651c2acae5f507bc7f08d1a927514715cc9b4d3761de5abc99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129099 Malicious code in ogi-mangut94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e90cd25f26ae5300aecc21b0792172ec8864bcb0753fc8b07c8669e3852a694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130223 Malicious code in siska-mangga92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce94d377f6229c80fc540045839e6e716113509f536a2d5d1ef7c50f1210d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127155 Malicious code in helpful_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d746cf5182fb660bbce807618558f732107fc5e5f4706bc1ab79261e871735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-naget45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac56ce64b1d55e0016856e7132b6a689af591e39e029b845b2fb687b74d2023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120432 Malicious code in hadi-rujak42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ea61af37610aba98187bd0e88258956383269ce1272bced96a679b0b271a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124287 Malicious code in wibowo-buburayam82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7072cdbbf19694eddf691c7aa95f4c08c018aa430790fdcae9b67c36fa651b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4e88f058444689514a5c5f2c46f4d216d0cde0855f8ffa491a799df5bd662e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116047 Malicious code in nina-semur65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd0557175c0547177ba001dfc590f32d41ae242ae20591a3fcb684f347dd8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56c4435f0cc0645e8f7e2d344fc9b725dcfb695b596464d9f1cd5f463912fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df42799d75fd62d48f82e96feb579ea19e6f3cec64a3edaca8b10ac277a791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88594 Malicious code in nadia-ketoprak94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cbffeb48552eeef9becd6b5ca9e0b58ee706f2a712cdb713e34cd48acedbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b30285d632b2f16b5eaca03f4962039cc1ee03090d85ebb5915dadf5a6117f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81335 Malicious code in sinta-kepok58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f31d87421374d410c465886e9f7edb2539ad68b49c5ece9cf02582624cc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-keripik44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb942562f6efa9fe632f848bb33fd87cfda7bbd7e93bb85868b5f2d096db577f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74157 Malicious code in lina-wajit76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcec137541adf21a823b63840dbee4b5acf62ca74099bca4a886c802fc74a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75754 Malicious code in tuti-empal15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a101c4ac38a1ca29a7d1852b1cf6446f1b861c14ef54c9bc6b77b02c71a5fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6c138a55e0073162ff6e22f2018a2c4ec2bd00ff7eedb41e98547235069ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53365 Malicious code in maya-tempe7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f509f7ca116b48494a1ea9126ecf3e08073ea265044abbf9a5fcd34537600170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-jengkol5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98de5abe2172793adb0e21ff77ac2551718d1dfeab3af3452f65eaa3664ab53b The package bella-jengkol5-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...