MAL-2025-188296 Malicious code in nightwatch-spawn-leda-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7a1045067738f50113be83874dd4bbe0afc4ee5fc89b8ca6d1f619c3760744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-vuetify-antares-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec458e52a9b2de78104cd2be4d4519b5b8c449a2cbcc9ea5ba651143ee5dc1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188153 Malicious code in mutation-dotenv-leda-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e570963bb062fbe8ee0fcd2d824c2439b265e90e824a4f45dbfd0dc83ee61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cat-big-code-star-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f3f6f9d454212a45cd8e581e11bfd884a5fcbb6280ff321fad59393e2c987a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182681 Malicious code in inda-fodj-guofaipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367a01b7690b371bc69a5b6d424268a49f63761155f23e70c8ce4041aa5a3f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3417a9b6dae6d4418038f2d8a043538d3e3e47bf99c2ac99d0c9004ebe2ec527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukaunai-hunanakuaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38be402fdc0be8cfad898e06afc4154026429596f2a4bf78566c599fe664165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182521 Malicious code in imuay-agg-ibua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1906c5bd2296005347543ffd8d5ee1b41c0955eb927fe61f9619b3bf85435719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179520 Malicious code in anais-papmoa-0pia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284c7c0f3318106daeffb0218424cd355124f9327f4af6dda3ab3ebd98f1ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172895 Malicious code in anehh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6274c70175e05602b9dba9752535381a56101bf14876a1f150462666bf0a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-diharu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d0e81475e83cebc9c749a3225d5f59636afc4a02ae74b67377633692a41f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-diharuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35cccd0e90b93105c13075be49dda319b83fb29f7baa2e2c28d3605ee17b7e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173521 Malicious code in butahu-asfaui-dufusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67be8c319bc861b87da7fa94b9c68507554c750759018fb978fb05ad27bf95be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173261 Malicious code in buis-sunina-mubana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8248c05c4e2065670ab84204b8e2ffb15d0547a90eaed8938a9d5a68d30446da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178105 Malicious code in polymer-tehh-tred (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b623894bd788b0b6cc33ac15bf76182ebbdc2b7dd2968f690ab0aca9c5db3d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-nutayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58cda6e58825dc07c484cfb47d9c855bb234d5da04ffcabb0f2107425843b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172409 Malicious code in heres-matila-unud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab53d5e845dcffe030f200ec1697a7117bca926e29b481392c70f82d94682a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-nuydcuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73d1da69d1efe4c5f23a163e94498b99b9c286473ae1f777d7ec08c208d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-aspsszas-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908d474b7790cd2dee5c7171440df3c21f20d996690aaad4fba1b94d94df494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833f342be2c6fc26cc492a54ee32d925571d460c4a5128c9c5405ece80a68255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...