MAL-2025-187767 Malicious code in levels-event-bionics-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bdee777e410b3fc1869f19ba81326e968afb704dace7f49fb14bc7f0397e233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178569 Malicious code in sahufarf-satud-fad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a80f267e9861c3f330738b998b7bb7512154f7fb6060d1d71529ec55ffb316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154f908c4da812f29409a84cd58b58930a0584bd6a801ee5998b94da0fcc4ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2ce0323d02ed57be30a15534d97fdb1fc98120373437caf05773ff6cb73e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170378 Malicious code in verify-ayca-amilsukaoxmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567d47c6eb5d9ae23ce803df039130f1f2d3c3409cabad04af13f4f78a983f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gr-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbc195bc1405e4bac620decabb079bd1dbba43bce25f06d0c8ebc48094ebd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158211 Malicious code in lintang-tea50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbed2bcda991ca63614c6a76970f7d736edce92977350b3aca2a0f2639256bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-update-hyperion-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856bb93d73cea29e9602b81c30057a610e50532b6049d7a87ef6b010f8a1aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mangut47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d537026d69dab5819e714bab17c6d6f45efc3c0d65f1ff29634c7f19ceb821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126050 Malicious code in eka-telur66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e35778ffa6ff83d695598992a5b974abc6711474c910cb9cd95847c4270952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118646 Malicious code in agus-lumpur45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ea1451f6040df4f82879027e0b8b506e8e3e8fd78debbe850bea10d17dbdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18ff432316b541804e1b0265ab1467aa34b10638c04bccd169ddaeb4f04aa98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mangut34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3503ec957b3af35a63a873bc2fa1ef8990df2d5425794754127106d6d406b420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-botok39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fd5c8997fbb243718852fcc8de4224825dfd67204333692e6645e258d96a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103505 Malicious code in hadianto-peyek97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d46e09361bba2a926c265374c536462f407897af5e22d038e1b5d8daca529dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-soto68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ee55462b36df27b6bd42dda2329f65834df5e66b8fdbe3d875a09687808d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80560 Malicious code in parliamentary_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbc6fc3392d4bf45e212e5c4082be0182dcb8132bb52659aabb3e4111a5bf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-soto97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cbd9191826777528d87bde9ce0ab426c101fb99ec0fa61e90e40e3042afe29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60032 Malicious code in blushing_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0900041636c4e012ef3e1b3839d1dc5f606808b3c56be1eee46d9ca21692658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...