MAL-2025-186584 Malicious code in development-xerxes-dagda-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7042445332cc153f5065a7dece3340b416923ec1504216b77f9ecb81566a7d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hipop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b9a3db2b59f4d229505d3dc02d2c1c096f14efc44bdacc12de1c49d405add4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175805 Malicious code in kupaio-uloka-jalaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1495745fadcaceca037ed795dfaf7db3dc699cb00e38c24eb3180b5b25b2bb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-daauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8336b4e48823a27153e9ca371749d188992896ce8e28cf0d446a706252559688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-avigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b359618ebf761ae22156c606df5d8ffc95922f0613b02505aa4964c114c1947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-trsyud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1ff9d7f0356a77d2503f1a99c564a39ed57ed268fb52bdac04d579e3a4a295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir141 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276c3ed297b38a93e3677df686d4d0e6148ebede60431b299c6738ed912d865e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169695 Malicious code in ucok-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b49a1c2ff4a407f2955bdd996b0c5daffc70e31021c86a8818fe67458dba4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165530 Malicious code in sabudaaopa-muyua-bafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0df5d9d44258b3a54046f865bf46c41becc680fad6bcb4b81e5e30a78755930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c11726322434cab0607f34df54b217403f35285e9e8ac9637176645fbcbaf15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albio-tolimsyur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65085862fc3b30ad042a6769cf804a263513bae5092620b5bbfbce1cc844e294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151780 Malicious code in aciyua-idut-dau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336b22fc1ef0ef740bfea86c8f0d0e2a64907e57f31ca08dcd462403e399bca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159073 Malicious code in mahnud-mau-nanaayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b04d32b02fde0c4293b500f7f54d3f19fec78aa5297b2b97165c135e48f522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-firebase-hydra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2968e2c1db958009855484fb18365bced939dabc426a4aebb39c634a70f67dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-leda-framework-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb4f8cb8d4f557c3034d71e7ecaf0ff765c06e1a8805438ce959a7d22ca3637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132183 Malicious code in bambang-ruwet6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbde8493903143dfd60e1d3160f3ab9bedbdfa7c114156ab3a702047bbf3f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133969 Malicious code in hadi-rujaksoto74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a8a8fbe34a94392ee44a036a430a9df461938d83d2533f6372c0b8d2189f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kue43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05d3e601e1a685bf3f9f499a8dad0b430efe68a14e32f41996cb30d9a44efc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-saguer22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e71403f900136df49c2b8e5fda80404142817c2c95e955bee7670098d1ca413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-takokak67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0ac676dabd98d28151b946afba73b2b89c50d492cdb7be80df2803b339766d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...