MAL-2025-187319 Malicious code in helios-nightwatch-tethys-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab19a67d9571b4928642ad52ea4d92a1394cb76bd2b6e7484639bb37cf0aad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180059 Malicious code in teate-thy-py-fude (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236d339ca510d86e9efbad0f551efafd2155b8d7cb43fc7731b0be4b832af39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862175e4fa0ab1d2bfc7823dd32651c18d3c673579f559b81b106df5b12bac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamoli-liumakuakoamoho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857baee5031fb8442f1266e51eb68a0a00fa74f67c6ce43f547adcdd3a1c3c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6c55fd6c9a4c52c0649738fd61e960c75a8859b7590c3241588e48a8c9b00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-getuk14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222ed2adc2c69bdc2db3e9da0858df6373bbd84c94f6f37b30509f9cd7ff24e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133172 Malicious code in erick-teh87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8d2222707bb442f0676fb17579da4d89c41b880dac42f16cacf4a2c2128558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lepet25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fc1216bc76501c2c8ea8b4a06d80ea92b249b27008d425cb38cd7a9aad3978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120800 Malicious code in initial_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733ffb3a6c5d36b03fada93be8daeb718030c9a9a7b60c20555300b0d8ca93ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122727 Malicious code in putri-tempe97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa6e887f8d01941995192564bba5e53a68c5cb7bbd716c44930fec71cec24be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828edb7fd905d96c7923e18d86556907909aafcd6ce7c4efa6bb3450e99e9805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92585 Malicious code in yanti-rendang24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafe97614bd53a7535e48c08968a3155c17a3441e24a64fdc1c319af1a7d1a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pure-salmon-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69f23996d37bbbda17b7865bbe9e4910c1c1c57c957d4ee9de54f1f1bff4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-miebogor74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c1b682021c511dda92e6444739abf8b144ad3204bb5d29c2d9d20744fac0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-jengkol14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cd84409f3f2255f543cd4360832e85f9f169be6d5717f9b28e18c21e484792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...