MAL-2025-186293 Malicious code in container-tree-signal-notify-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71d5038f64d6e372dc504ee04667b316a274a372b8dddb45c2cd8c93fd779d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948acc55ead6175abd00658e2d85ccc65c79f1940193cbcb0069b08771f731e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179456 Malicious code in aiboloa-minispe-amilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb921a6634e0a4530a4329784f1eccd2cd5a41dea43a9bfd457abe4e18579a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abtenng-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad4814db28bdb2fc400b1b681fd97c45f80693835ad06701341a79291678cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162482 Malicious code in nokire-asaka13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc96542d452ec75461c91cd5384699d4b644816412d6aa9c47d26dcc904c74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer-apricot-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c223e8b64edca33cca40bf70ced987c14eb549322d8a5fc3e01d44c5eff6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-jamblang73-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14dc7e95fc5490c5597cce3b5e9c462b5d9102ce932f42e698041b2d7d21da68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-lapis21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f4657069b2a8b98b625aab97c6587f050547ff27b5559aea45c83f617136b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anxious_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f8caeb912d4995758e05d1006b881e5a643620ab908561a484fb453b23cfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129402 Malicious code in pregnant_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7ac705e3e07785b2a21bfd5dbf34a0d45b5f66591a60360d95a2481c1da835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125337 Malicious code in chemical_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362d3991bc13f3732db1ecaecec84171e333cb9ee9a0f1bd904b1796d77a1e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122539 Malicious code in present_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab095743f70021105ac7dabf49f50e92c25c6444f96747a7af19185a7703d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118584 Malicious code in ade-lumpur44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcfce031202edc305267fc15effe0f620ca87aebf75615f7ded294d8eec8975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-semur54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bdde63212d55a2a71ad65aadee48439365cfe6c9ebe54cd6aa91b40faf471f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-empal38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00fafdf4cd18a426924ad0c046084605606a592bace02f3312f74f28e0db6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101581 Malicious code in diplomatic_skink_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9aed083696157fe756de976295b47618a9b4d02a136f0729b186d37b888e9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103495 Malicious code in hadianto-kupat33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9935230f4774142a2c963a98028c261b04da9dae4795bd6d7e2b1168f86eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109757 Malicious code in tomi-taiwan97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c55742c5268c827214f61dcb75cbbdc65a8a6a22be834487e4ed2f8894594c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuckoo_scarlet-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8052c846772a93d38fe3cd3ceec6f43165de829377337cf6c74be80bcd24f2ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-asinan79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 864e9d2edcdc8375639b23b1efd208b5b7f18b526ff58d1274079e4ea5cbca31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...