MAL-2025-159155 Malicious code in makaia-anifma-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbaede68f72d9fe0e71af9db0b8f0fe924b5c4ba21b6f38815f75e04360046fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d1a45cf8ae3a4446100017d20255014061c46fadf17b3f850dceafc622b846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166131 Malicious code in suharta-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0695a9edbd18202844b9c14ac7b7e3acd9fbd0a330cd08486f66e4cfdcd148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168467 Malicious code in tealove-nanami37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b175a24666ad40c839fe8601500b8acc945d3cc285319156c06c7ff18a50c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141914 Malicious code in electron-forever-cypress-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bec960c5d2c7b30446df4bb08b2972ef4d36ff312d03c3c4bce4b033e08d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141158 Malicious code in corvus-loopback-yildun-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6529875bab3e3c2ea80662f8dd0237daf2d1c13aca1fa24ecbfe0e6a13e213d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143441 Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-ragi97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4216377a8762687045116edd114588d903ea716caa01c5a82bdc9710370d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132492 Malicious code in cindy-mangga63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c15b4e0a0e23538706ee49af24b557ee24aebf17f8b9423e5908794fc42d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-gado-gado33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d01e7c7e97448576082b0124f2140856f915d24a22eda00a8e67ef828f1b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d114e35612a3276bbdc391165903e254d2339570a66b698a9a4f71a09ed2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128923 Malicious code in nina-nasicampur76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a62dba2080654e6074acf63d4d0db4a02ae1600ef323da5f63b586c2040d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc39b3b2d4d422880b85e8bc8c179cea195493959dc7f8da02f1796863f78b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-buburayam70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d387391e0543d051cf9f9b6e9ab3040eb45f3dd79eb1db248569bb3f97ee41b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117528 Malicious code in tory_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7135cd0d33b7aacaac2031e55c471595c5ad5d32976f3d799a9b2ed1c1d148bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107696 Malicious code in radical_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef489b9e82d1f082e9216507f30620d9942f4d5114e6d8d57e302ae530710ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great_ox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb10416774f962426a75510ea4cf66a7fb7ae2ac45be2bae1a816c327d0bc69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df42799d75fd62d48f82e96feb579ea19e6f3cec64a3edaca8b10ac277a791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8195eea0498fba686ff5fc9e93b6de85a1ffaf3cc5ccf1dc897c7940d4a8aa12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97247 Malicious code in verbal_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dda95a33464209c17ae07b619207ebcd90e16a44a10171c76a04975752d3689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...