MAL-2025-186584 Malicious code in development-xerxes-dagda-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7042445332cc153f5065a7dece3340b416923ec1504216b77f9ecb81566a7d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165530 Malicious code in sabudaaopa-muyua-bafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0df5d9d44258b3a54046f865bf46c41becc680fad6bcb4b81e5e30a78755930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c11726322434cab0607f34df54b217403f35285e9e8ac9637176645fbcbaf15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159073 Malicious code in mahnud-mau-nanaayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b04d32b02fde0c4293b500f7f54d3f19fec78aa5297b2b97165c135e48f522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151780 Malicious code in aciyua-idut-dau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336b22fc1ef0ef740bfea86c8f0d0e2a64907e57f31ca08dcd462403e399bca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132183 Malicious code in bambang-ruwet6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbde8493903143dfd60e1d3160f3ab9bedbdfa7c114156ab3a702047bbf3f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-saguer22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e71403f900136df49c2b8e5fda80404142817c2c95e955bee7670098d1ca413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4ae9d0fc9b2e8ab307f14299cb472c552cc05422a6014059778a2df086d9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-ruwet18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df1d013a04bbb760416c8c675ed64925559db3f57ca486878093780705bbe91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103421 Malicious code in grumpy_ox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab34d13f1ccdeddda64e741ef9113e36a5fc93b2a111ec4a5fabaa6c40818d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105482 Malicious code in mahesa-nasiuduk86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdbcf8059eff0229139b7572046b5337fe8d8eb6589648c72fac4fee90b10a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97515 Malicious code in yucky_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28382cb74f2f769a511bbd7a7417016749e7f84247557fa8d593ea3dc5a97613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tapai70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd9423a01c9a08875bb9d6a67045585b9db9e30e79387b1d15e82c0afae1e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89107 Malicious code in ogi-otak-otak75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533fb73f6e04f23c40823908838a05ca8c86b710dfaa7217f06dfe45f6d396c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tapai81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d7a34ae288cb1c019b0eedb4d834ccc28d59a5467823ea35d7ad853ad2bbfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kue61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6979fc304476bd397708f5438ab9d1ad60c95ff5366600a871fdbbb94a4f27de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69305 Malicious code in marine-teal-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a094076dd438fe34cfc0ae95b9a59742e4d315055daa613fd921c83e9c5446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-moci40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16740ba2b42322d830d3dcd0750f3aceb99346388e90209782aeddc6b6b3855b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...