MAL-2025-182707 Malicious code in inda-fodja-gugoiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c25de26cf95cea48652a10b38407eaa073468b4633c4367edfefb2bba00fb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150bb537c6d0a4f842fa13323d3e0331718c79aef4ba8c28096768421d5e96c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-afgucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c294da943926854d0b2279353870f995f3332712cd92cb2b36fc1aaedd37ad5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varunpatel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d6a0520a7afd247a52982a7ca156cb80c9083a66eedfe002c59d5afe8c6da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticuil-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4a885eebfee32cc900aeaaae87ff8d5bc0dc357fc84bd7e9f211538df705ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169425 Malicious code in tusya-fss-s3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbc5e4927373b6686197cb410011c12e83b050d70e1c6ea1324f1579b9c2f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8b9d3274bb451b310c29a81520ed24a54967bac95ae2ee229614ee41fadb0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-rate-limiter-library-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ca4da3b6360d40d6112678563f6472dad484026ac05cde729730f1baf9471a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-callback-lacerta-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b83b3a3514c3342e03ae6ef7c003766fd44a1062721d488bf938e4f4a48224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-astro-dotenv-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361f069c8f34b46d870c8a13f9857e804499b8f943a16c7ba015da58b6adddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143528 Malicious code in ignite-stop-castor-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa35354472c2f2678fa95177ad7e7c4f6e5ec0a0e678aa6a6919e56870b0ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136810 Malicious code in rudi-ubi44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77835c4ea68839fa5f56bef58ad5d9f3fd7db5d9be9d7cb3ee92a8a654cd3bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-sego33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a6402fdfb276431483546599cd49c78870db22935c699429b96063d45b04ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126316 Malicious code in experienced_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a87b0356a4a1103c20d2455ffcaa049314fa31e36086a692cc0d0adb631e8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-peyek91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b53eb29f1dc2bf70d6faeec96e6dc47eff3954bdf391ec6be660ed7e88f2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e1bec6113f65ffbc152413a1912a46b141e1e13d9196ad9219e724593bd1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39f6e57ff38df236ec92f2a9c6f860d7bb139cf905a556b24fa8fb0c38658cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-empal1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e70ba93e9cad6346ae7068441377a662f04250cb6cef70b802ecbe8baa50d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122737 Malicious code in qori-brengkes55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4835a0fa1fad1bf020d6a3e6dceb4410eaeca12d1f4f35938c9f100793326c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117100 Malicious code in sinta-telur8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc53edf90bec199a300ae5721ae1da4be50c30e8b82bb2b2713f88f3bd6d26f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...