MAL-2025-186263 Malicious code in compress-tau-enum-book-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 011955a099f66e34708fb647958242177ccdf3234a3a83ae84802211bc3be1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159192 Malicious code in makan-aigoa-ifugafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2761a133ab1cc470f8729a4b38590136b33d2dadf3bd90b8a1b637d8f2c3114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162249 Malicious code in nokire-akaza37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ba92e1b8504d30a994cedad89223f81b4d92c4d5ff6ebb25d9fde869a2880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162378 Malicious code in nokire-arhani63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4b4a3e3637dd2f045f98d452686a46a9a126ea2703e5494655955ec86e6d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164222 Malicious code in piluka-ali-bicupaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c622771ca8b3a9918771f607ff318ea9b11bc54ee8d57921958a4718cf1bc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159635 Malicious code in manda-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bd306c1a438a6dfa5031204343e0c0e2425c8e746d539ee834bfb670c21704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-zephyr-perseus-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2635991b7d8ec4de019d0f6887e3fe94ceae95748053607f691bf9178543ef21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139731 Malicious code in auth-tethys-duplex-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5118548c8190c3f375c9f5128d029bf31797ee6cf9feddc4180b3f4efd440584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144596 Malicious code in lynx-node-sass-hermes-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4cb8743405da734d4d184d2310cc39dc588330460456eb82aad066ff03c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147147 Malicious code in regulus-geckodriver-apollo-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86803956b94c8ff513b4ef9bea65fe82c6737e4b0244a4e7a7456162559bd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-pyxis-child-process-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8266f3e3b1d69445352e920f258de0ae4c53efdcb390390a11291ce23337a51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-dodol24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5fca564bff1edc3aa6214ef64205f90ef1c5b0df87d774d864c137ef11aa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_wildfowl-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe3ea7bb2cdb005c96c2fbe0e65d94212dc59ced401784c63fef816cda23bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101503 Malicious code in dgjuog-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e588fece1302e6de63bcb0ec684145f069a4e8da451b266454066039ec367c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107199 Malicious code in pregnant_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bd7ce687907ddd1aab0f2fe3c022091e677c678410e29790e5fbced48ce8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec31b7424d4922a525bba49c8407ea0b8d98625bba52c89fbce878fb3d148e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104918 Malicious code in kurnia-pisang58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00206db0c3aa97babccd4aac3f1375f9324e0557f068c92a65a509f202296a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea17e7be60ecabb92e5219881ba42cd577559952a89090d1fac4ecdafe902ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89083 Malicious code in ogi-lengko16-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6388e58a70b3d514b25f5a81d806efa5c16684de57f590f05ef3589a7c8d0de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-gaplek7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c6e050ec271dfa284fad13333460a5ec5f3d9da353ed9c4107af1d42b552e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...