MAL-2025-188420 Malicious code in omicron-query-air-cold-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf2ab953418ed4cb1f746b6fb3179574ad14d8670dc1414ab46934e8199dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-auth0-callisto-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11064afceb6e678c2829e4532c2a26703f08758ccc1c624ce372d6c569a19665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179014 Malicious code in ter-sohyun-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583115e3afdf0952162738f157fb03519406ee45af27d73717fd6322ace012a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176776 Malicious code in nuilva-dakdre-ahksogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb31f035009f7cc1a30978126d8cc43ab4e395ac32bcfe32019214d438ad957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161502 Malicious code in nabuf-otin-agogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3567e2696f239132482466e8a7b22da1fa94b3b5998c119a32a16674d68c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-nodejs-upgrade-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a287064aebd8dc02a43ccaea9def800416fdf41787c254c715a4c63df047f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140549 Malicious code in centaurus-publish-zenith-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b42f820c0ea6732615b43ddbc116a85e824344228b7a591b646ca95d8788909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132226 Malicious code in bayu-rujaksoto45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985f7678f5775382302cd708b016129eff838ff4317529367e6636d6b9370de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba71d65c17f09bd483755a349822375ab78248de3b4c9e9b81262ea343dd4798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127408 Malicious code in inevitable_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4515a12f22868c0b7e3f759636d3813e8d372f045a40722cc922ae47d792a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kue60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9431f43f61ec1d91bf670a6b5ad72b8c52c27e4914ecb6d9c6cc08e42a96a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106991 Malicious code in patterson-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0c2f5180934788901433a2e1756f96f664364cff73b7cbb41f0b2be399f852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92814 Malicious code in zain-nasi35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e2aa87bbfbf73b006cdbbd49bc104b74d94ea0ba7b4fb8006d7990396dc0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6960e84f48905e9c650378f674e355a89196b46c554fb6f8e7d0458ef88d094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-bakso74-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad03f26cb69e9ebb592d69e47e22417a6a75acf272c881038fcceb518dc1151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53922 Malicious code in okta-getuk42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aaa5c2af54850fdcf77825069d1d2259bb7f684a47305922e148bcc22748155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...