MAL-2025-182492 Malicious code in imodiov-omfi-caa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c127a11669a72e4ec413d0f32f1ff12a72da3a3786e715d2ca768512456b990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-dafdfa-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e3b4a21eb2bac41628322a1fc061fb75b06fe73104aab4da9b3f64dc07026d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172638 Malicious code in @mipta1/rea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32241fac5a34079be1541524323260ea2357254ef22fc2cd2c8d8816e81c7830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170837 Malicious code in amjadatef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57024fd43175c34c5348abd813049d6f030aafbf70ca4e8b37adfacffa698bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7240fe67f4e56ce169bed9872d76c58dd704d5750f9ddbb30614b3e17dd98749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167106 Malicious code in teagood-manaki40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cea8de29e266d19d4d2256309406f99e53bfc5bc6c2ae9ef59ad96444bd83a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155318 Malicious code in gifa-otau-uasuagffdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335086b4158849f8b2c3bb983978362c3e70fd6838d094b4c6c90548f1fda471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161851 Malicious code in namase-mewekaaty-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000a9c8428d1d7a2f1e25c9a59ce503ab7a0f46fb6afda484917303ca2b120cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-neptune-pulsar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb4537fea3ae4ab2a239289e78084f27c4fe58003d56783f02db600f205a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143931 Malicious code in jest-prompts-node-config-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9728734a942a533c415e6987fd3fa55102d80f96c4b586d9acd545f101f9cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149326 Malicious code in webdriver-manager-markdown-postcss-loader-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372c9e75315f0abc9ac9ee84cb86b8c1b66c0015027a741ece72951252b24269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lodeh66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a806534030bb80249323d0c73edc34c386a09bd78bf51be9e17efc2ee08b187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134829 Malicious code in kiki-rujak66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855111df720808a16712efe87b4dfb81cb267e8d257ae18fdc9bd003fe683309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-botok57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab2eb27678a89fbcc1e7841b0fe952ff5f19134250a52509755652f22201331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117876 Malicious code in vida-telurtahu65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3e653c2718b7a781c9e87930d88424a07294e29c2d1ba14a3f8e615b6a0a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102077 Malicious code in empty_stingray-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c16e8841d2c13b94cf31740ad48f4b7fcab8ccfd967f7077e32fe7b0867f460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105016 Malicious code in large_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53ea88e0266cbe32143b4bf02860f9926368cb3ba2ffae85cc6f5a1bf0b595a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107543 Malicious code in putri-soto27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091fc57815db39bba4f71530954bdae4037eaa91da7cd7aebf0452132ba141d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78427 Malicious code in gilang-tahutek32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c352dc71a687ab345c2457e42b67529563f85821a4ae99577539d4af8d61a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78007 Malicious code in excellent_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9899df3732fad77b817995b7b0c83ed083e3b0d31bf844b55bcc3830a502bd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...