MAL-2025-179442 Malicious code in aibola-miloipe-apamaumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f21be9b9a9533d372f0d2727078f7f26ba4224b77de562fe931e7d73a51a81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171277 Malicious code in graceward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c670bd7a862cfb51104615367cc1bd1eb1880fe3eaadc996e7f65dfc91fd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-aln-ipibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce3b34ff4d1b4fae265774164f0827d527937e9de7523445f22d2c1fbec80e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-changelog-cressida-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9e9e3261268abc9d9f358e046c33a68cbf459c83bb26bf4bde323534143ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135866 Malicious code in nurul-kacang2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12c7dc9b9cad82627f39a6eb215b7a7a0b1b0831ffcf0b6f31e660ed3ca82e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128605 Malicious code in maya-nasiuduk9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965bdbe5806c589c3d24c6d0a58ac7d9fcd44086f0c19dce7ab31658d1cc337e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-klentik52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5ab1ea681e6d72af6513f15928f74bf510cf6aa2a82c0afde77bd7a132a534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85720 Malicious code in fuzzy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e236574e1a2a463ed66c4a0725a3fbd54296ead421da2cce0e606bca7d31fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86875 Malicious code in iwan-keraktelor87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0668679f8c0d163e3958f250f1616c3c2a7a83092a7709e5eef36f4c9ce45b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-otak-otak7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b8bb3fa456affa13c9a9ecd20610456a34c301ed138bbada410208f0c168e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69745 Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mie12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c4de49bba59bcbaef5df089caeec601d1c0191415ed52e442876e8ab20ce61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...