MAL-2025-184680 Malicious code in olobc-uyg-ugiafaidabiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a61d1808bad4fb04d61e9b70fedff6a0ad419a66c8cdfd994d31603d309a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-rodras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5011c07d1bbdca4ecb43c572ee1aad91b5a522c8afeb17bcc4517a8dbbe9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179520 Malicious code in anais-papmoa-0pia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284c7c0f3318106daeffb0218424cd355124f9327f4af6dda3ab3ebd98f1ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-ailolioia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a443d41aa1a0d8f02b1ec88acbabf468cc2f8d664a3b65cd4e1a506b57a239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b20be01076828ebff2cc9fa513b6b1927d9430ebe0663592ef0f07d0607f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-daronoaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ba89676f05311eb605b8e0c0af040ce4d01b1d4ebc098d124a307524d1be62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-playwright-luna-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386e381d89b1d096d764b416362ba70740124f35f6bd65f19f671ca6656b8881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148290 Malicious code in stop-changelog-centauri-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc4dddb8925f9a970aa7c5687caf4439035af040dcd9f9d60675c26aaa27ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-child-process-zenith-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8ac52cf3de98dfb5eb57f3316ceac412304ef84753e297e90dc52e087dc974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-bakwan2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80726288c48fc8260cb467046746357887075bb654dc99616b3e0b352657299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-lontong99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3ff32f872b0a9a1347a3cafbfddf5e418f79d131dfc2705fc6a28ae91e9d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124347 Malicious code in worthwhile_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b1afea63b681514d121fc61e069ea8165ae5d13b4d5298e10eea5c08bbd218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115661 Malicious code in mahesa-lapis87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff89f3dd6c3ceb9c9ea003eff23e7c0b1ea09d985199714dbcc98c523fe09e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99948 Malicious code in better_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e8d02dabe7b900cdf9fe936530c754edc020117550164976bc627e083efae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy_narwhal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65a52e2e0c702c6dfb1ab0a37a0f0953bce75eeb735379eec0287299e3b9542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-kue51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8279dc71039460ba67b5a5b382db8d5ce16c075fcf9197e8d0e3f5d0aac9a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110553 Malicious code in vina-oblok56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b058c858b1bc51a82d8ad36806374b9c5ca7987a38184b3a25522b030023c205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33846bc9b40150d57896fdd1a179bbe9351fa1fdd687572b353cc2c267262a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97428 Malicious code in written_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a314eaab878d01c7a5f380af3d9d0c89838bc7f9cefbbfcdb21ecdef3e10ab1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac98ac90f2785efdf88e1443b3c14d821440cbfb7ace4682039e0cb0e7d518c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...