MAL-2025-190036 Malicious code in umbra-enif-sirius-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d6e28e0423c02db3969a8742d5aa784afb117a4d8361b30eaf8032885dbdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrttytr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ff8fece47c9fc297ff4ce2981b975853887860a4531ea070506a17dbde7429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168145 Malicious code in tealove-boy38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2431834ba1b125f65a9e5f58044a2bac1b0853c281928b580df3b5fed75db5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131861 Malicious code in absent_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d022e4d5962c610622f7a6aa4443dd1ccfc7e1b972c2fb19cbf8eea5b0addb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-empal12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c32a697fb75d1f9b7978673e11381c61482580f994ccb3b5d7df8457497008e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-lapis56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed945b6ded1ff5af48dc5b24249c772522e1c5cf28089802218c9014d81bc7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117679 Malicious code in unfair_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7884d3cffa05548ada07f9aa176a9619377913d44863ff5941428ebfb292246e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107238 Malicious code in pretty_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16d9b835945db697af3115607441461accd8f6735080aef4d34432b592b7019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945493c4354347cf142658f580dc2951183d4c95ffb866203f10f76ed627a24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kolak54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586ccf55d9b0abc360965b3cb0ab1a76c4c0c730de9971f901481be6062f3ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86620 Malicious code in indah-botok48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8d5559069a0558b0e3110b9f233e7d4430428f237ababb1eeb03c53b53461a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91371 Malicious code in udin-kupat36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e93a53dc572db89e6182317f09950eb77276949161b1e2576c46c28442f076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-tan-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a071bb7266849f446e2d28cdf0789c8fd12ade0127d6c951d7e3aabf5d3a661f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-keripik78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81e32920c1e35600ece2bfdd1796df3b4d74aef168a217dc8b7155000b3beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...