MAL-2025-187957 Malicious code in mechatronics-arcturus-puppeteer-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1eaa9f69cc53c02498bf1eed85f24aed05f14f42b3aebd1070fcefaea74066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176270 Malicious code in namacida-nutayayafar-kadasida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cf86d867552b2bf014c04bee51e452f94a2732301027dc8495259f51105870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-agoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3357943d41cd0dba38de4a989e5e898aa66eb69e5578aef9539ef39ce868511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-hzsips-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b67036adf200654034c0a758009b5c96fbf3843ce242c350791146b6706435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-bakso68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3d4d90d799e8d4b65809a249b52a255af4573d6c9a7f6f1951b47cf32f8407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8dc9c3af457757c8b6a08a7f003fdf4a21181aad06d69a78a8aadbf386e4704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131876 Malicious code in active_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f552ff5fc321d8a71b0611c80650346f390e6cd68b013072a444ee71624f6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125872 Malicious code in dian-sambel58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18535af9ab44e0d1da7b52a274ed70adb7908f7232da78266204839b55c3db1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lepet87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19c3a540b3e0ef3b700a96875c8aa51a359c0279ebc67e1500e7f6e2036e1de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106211 Malicious code in naval_ladybug-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c3c10bacbf7eec25832a25b240b55754e1c6d4795ea1d0f5d0e8e8e3dcece6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100310 Malicious code in certain_beetle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5fd11b15d23dbf3c659f1361d01fe1589ff5fe52c2bf0aebac2d065b3c7645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97028 Malicious code in top_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dbed1e23f25f9175ff2ba4ab62dbc86274bce453440d3a75d05a23ebfe45fa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-klentik5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e193e718c4bf9d27eccdf4a67a46b2bf2894476d0836cd582e5ee11f4a4ecc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tempe54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deeca750f33e83f386b438e66db7a3ff20f23d2a5402d9ed83cb8b9cd4518caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55016 Malicious code in surya-wajit54-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4364d37888785da398380e1e806546260fd541f2124b8387fef6fa2e561b7bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...