MAL-2025-186566 Malicious code in despina-cluster-asteroid-wormhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f439fbc8184c33b4d3fcb4697058f662ff06229dcae196ce2b304f9a2e7d22cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181487 Malicious code in cewe5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54021b1cb3e86b952d531fdf525a33e1c85374f3c2d53d4eaf5188c64a36cd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-houd-mavid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d353e0d28060ddbdca4a76f167a248ba1524e29600dfe3e1959050cdd926c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207be0ecb2506d5383e3e456c8840197420248c3c421f62a05689a55f4b2f2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef56a25514670aa8a339ee8f28b52ee0f340fe9830e3d7f08653f84d35d0bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129282 Malicious code in orthodox_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f687e0abb915d2bc471a1ba1329af90548241b733204986192ede95d846df38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior_guanaco_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b7eed0d5d7951d65b0556846733cdc9aa96ed9bb9278a0f84b5f5f33212c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-kepok60-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7462b78c8b074fb6b7805a235cead1125836b954947e080e2cd7df6756c656b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105274 Malicious code in live_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9be4308e4301bafd1578aa64b83c77124b52d00e5d3daf6c429153e62f5748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85141 Malicious code in erick-soto98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3200ba2829d7c9be224f7847f71478703328768c96c0c9ac5926385511b7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f4fd540dcc6fcbce1c452586e0d121041e47930fcdcda7cddea2e51dca8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-menjes6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c642c497c2df2b9cd0bf44992a37e921ee70cf56bc6d969acede2f0f239ad85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-mangut55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7554c56cdc620c8d9feb1c6c5c2eac974435fe035fd0a51b63a8da6bc417dd08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72949 Malicious code in fauzi-sambalado89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b066d70406d477fefca52538cfc090920e77ed2bea09ac34abf8061c019f661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mie54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c520f689863fdf3bce6c9752dc5c3f54fb8bde8a99ed85d4b7d40c5cd4e2ad34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63348 Malicious code in hendra-bubursumsum63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2de1e672f0c2cc28fded434e7125499fa5e0c03684172c75e92383630fdbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59260 Malicious code in vera-ruwet84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d94b3f2d3060bbd29d395e6c20334e93b8cc20ef3c32eb87dc4a866b2527e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...