MAL-2025-157865 Malicious code in kupa-lubizfzlio-igugfsdsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe4322d941fe2b2ddc929cd42654fdf1bb8e808054737059de8ca7fbdd74a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143062 Malicious code in grunt-envconfig-bootes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f83987625a5b22f96ded6fb57b3a5b08594ac3a45b079c63a6905f3a226dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-rujak78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd59d489b2b6ec20badc608cd68424a9b2d07926731b2b54473f1bfc454e00a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126563 Malicious code in fitri-gorengan57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c3f9cafda52369796d87b786809f11c5d5c92ac2bbb2892dfd92582cff5418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131134 Malicious code in voluminous_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6509bf9e20b185ee3111ddf140efb14cd8f80f9b8b5d4010ff3d034f4f3fce8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116341 Malicious code in particular_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128b473901c104b07dfc41ff1bc608526e18ae913d968f211786be6fcf12ed6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104833 Malicious code in kind_wildfowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e549c58e9730d5b61dbcb890bea74ec5057d279d0039175bd55501eb07d5a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasiuduk78-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60964b34c3b07be7b8cac0b341ed18259fe263bdeb76042d05d88ee798d12535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89898 Malicious code in ready_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0825ba69e0359f23e0e03cca648316a5ddf8eb3ce7ab92e819f47e32c2459741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-lupis14-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b1a37efea466cc2b6977de1d480c64a9d9b2d82204b2fe04ae8a26447e99c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-ruwet100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168c1b9bd49b19904ed7faeb0f3d64bb5096488b475f6be11bbd883db48d1866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80aba79d8369b7b39021adc06f13ed7f7eef8f5212c751dccd6e37534e6a02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79496 Malicious code in kurniawan-kentang23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bef4a06934647d798a34c2c7b4be7639df176ed0472ea2d2fc21b9ae99c85f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d9aceff8c9905d14ffdcd30cb2e157c4821e534c239e7af1d2d17f0ca59795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64264 Malicious code in maya-dradag19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb0b9e3f1eebe4fdbd222bda53a2dd56fe96ef9b4e02c9f5a40b8d0c698e7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61552 Malicious code in useful_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162270d2903079da4e0be7944d9d844575b3d0078c056bbb94facadc9134f2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-peyek11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226d35598190e7e821bb16f7e5c0eda104d160be921df22f3c414a409c123df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53495 Malicious code in nina-kembang65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff7267d3cc740ed74e41bee7826562f0317646523ec2959362048217f91fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...