MAL-2025-158143 Malicious code in lina-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f29efba35411847b75a22908f62fe5e94844ad84c845964e5f21415ccb6ee1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163794 Malicious code in nudela-ofgaf-gafjaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de19fced31d8aeff4175171fcfadf8e9738d52f22af0cd68b018a5d00592ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139534 Malicious code in aquarius-epimetheus-mensa-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3ec09e7c79d82ae5f01e76fc90355ccd58308c893d2f7f8371ae20821c32c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-perseus-betelgeuse-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fa8f8962f849977da38989af1f68903aba39062e31527b08d77f2cbadcec83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-triton-chromedriver-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963effceb0d337e9917a274606d2d06dfb6f477b03d1d27072955f2c53759913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146486 Malicious code in prettier-plugin-markdown-indus-wasat-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f05a1808f8706ac243238666ec94a2d41548943a8cb519f9bf6475a331efbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137773 Malicious code in vida-lapis17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76aa78828e3efcb4d49961102ccf3bcfa79730c06de9127ebf7eaca629a74a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lupis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da477a8a52c32375ec2b58c11d47e8605ef7f5402e7fb4f445c24d2d3850a39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-miemee78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d552e1c3c28ef52cc2746782daa27b32baf2037da5968250618373301e68f5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123011 Malicious code in rina-nasipecel82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66966e29c09e0b67fc5d0b595bccaa96d9be4e8255566fa05df8f7341f50cc43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118190 Malicious code in yanti-buburayam88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a053063e985e360035d9444d797c06df5c32600c764702243dece150f0115d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103893 Malicious code in ida-kue91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7fd20de2c71a3f9485705c4c9e98385bc28f9814e8950293e0253949382e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88539 Malicious code in mulyono-tahu16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7787f5d89527ab2ce00c430a6b7ccbfae1e6d596d8ec2835037d7c55e606b3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-bakwan8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5c474ca81582ab7e3602dd5eff480030c9ad78e4a188966a2207ed2b7109c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-liwet60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec866afccbf69d40c7db75613741a453e0d75e3d6e70edc4fad3f5b216facdb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-liwet34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb276a4e5f121ed19884f454bb2c13fdc3381f4ef63d4d99a82e7bdd99700ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-chocolate-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f63ec33e4ff5bb8c1808b2e220c91a5d78c70ed8de16834cf769bb3ca2ba4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69655 Malicious code in nuclear-silver-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9345a1b82d349dd5e2bacb59921d53bfbad93fc7ffdfeb6fa67a7db7b0025d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-ketoprak66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b255c2a8d655b9605a00d646f77c9920fe3c1137a815a7719219179f4f3eec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-bubursumsum25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf883af95195fd621be272b4318449654d8d60b142334fddcdaed4222def4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...