MAL-2025-188062 Malicious code in mira-pipe-stratigraphy-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a737e899eebfc93719ad05ec9c57d48a39e9ff003452bde12f51658c501679d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-madru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081647c259b77974b1b6d86af0b08980ce0d8873dad37ba0ec6719ae6500f798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imunasggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68962eab62aac258bf168456be1f64f7fcaf56d6c7620aed2ba3035ae1abeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173029 Malicious code in anita-haladodi-misaldania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa4194e82be788b8677668636bb3aa20dee1f7aa8018f294f20ddc0c8b73bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusamakii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed827db18f14172d62f149bf1c59b87e1f60fe47f71065afc8dabf5a9cc8bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5020e15c9d091590ed3a2650c98a8097d9ed75100ac460283b9b483babf1ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163414 Malicious code in nokire-sekiya26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2cd0b63b646f570a3d2fad0e73bc963244f698eb8ca384b1c5695df5f577d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-spica-halley-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161b803565d9a0152ff60b29160803c2711840c6794f148fa262660e872d602c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138383 Malicious code in yuni-tahutek58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7693c114e00526e8b74425676a95e251b421383424e6ecdb8ece8cfdac9e97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ece3170075b714b8bae8ad4347a9b3c98962e9c7ae3c1139a4af2c76c2472bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-pisang11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a25a57bf395d0f5db8f16e8848ded7f33f4f5365d23581875ca2a59fd4a1100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661082b09da9c9c923a43729a0764516c4b696913fdd06ccfebd3fa6dfb8adab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_owl-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f9583424f07c1a42e8f2232eff31760f8efba807236bc70e10aef7ca55a08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100112 Malicious code in brilliant_bear-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892d232f67bdd3ba661d6e1130e8282a4200a9b543cbfc81a7fcf8286d095daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103524 Malicious code in hanafi-bika31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3445e5378e94ce0a0c49336033d80c6b4323e265c19ceca04a20f89141e1e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af75633e7a029478e66d7ba0e26498b4b3b6b9e5386160117bf440832946498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-klentik80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a15c4a75cd7ba959e0264ae771f0847d97b7f69cb38e25d0880515df4116e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76534 Malicious code in zain-sate33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6d42d0f934a33c4f7a02f200757d7ba125c45c6bdf5594195737579f3dc079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable-pink-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444f045ae64aeb641eb63cda0fe0f65cd83e73d13422c4543aae02a5ff7650f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66718 Malicious code in alert-gold-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a076b4db2e424997d86ee62985e7219e74baf0d81b0327b5e3260e63f7a1d634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...