MAL-2025-175201 Malicious code in kapvino-socovni-faffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec3f02116b4db092dd2c11d0dd87d0a9b1c0f0142c1c69126d0e83abf60b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faa-saiiaagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dbebd899673b5b7e5b79a1135fef389e316c63c3c84ff27e8507c1d95303e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-ofafbogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14967307c8c320ded1564a077b05e80de60c44a98cd026d06ce9b022c7265b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164120 Malicious code in pilka-kali-nuivi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc80ed31fad814a15b1a5183732b55fec0dd8d60b91894797252267fba826036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163695 Malicious code in nudalea-ofofiari-agutaibola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154bb99e8e6e34287e6b2897884c4aee77806b902650a0e841259ef4d7bda7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147640 Malicious code in sails-configstore-umbriel-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07c63636c7adf18d4ab98086313fd9f92d35fb37e9ec0982f061391b017a133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kue22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d793999420a473e2d01b778c4ef23d6016bc9d34adf548c60965b6dfbce8c777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-keraktelor22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ad968631d4ddc646577fd7e46007a8b4e1afdc9e97bf51c37da4b8390a7053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lutis73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ef86e5dc7740067ca76628c3f14d925ee5dbed20130c400f3a5c67c5ec7bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118838 Malicious code in bambang-nasicampur49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5de6fd2eb3d93f2f1a08401a949ccb26b78ff54715ea035728a37ea35bfe9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123782 Malicious code in umi-buburayam37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c4b7d347c9ee13c84fa35768c959f936939f43a6bd15e9dcf8e10d248bd199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113338 Malicious code in dewi-bakso81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffefb2834df5f35fb4d3483e70a7730a01ed2e2ba1bc80a70ea666f256533b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-liwet63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69fd67b16233e8319348d2bfd36755c4b79991fa912f0dfc6eeced989f612968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106403 Malicious code in nuclear_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9350e04c56aba1e7a7b1aad8c1621547c7a8b612b75e888150aa8161f78afbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-gado-gado61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f890b5ad3e3def0cbf05966931c27b77c88ca3edd1752082527c5afdd9a3e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92132 Malicious code in wawan-martabak70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328dda71da8655db7aba6ce537ea6c40467d2262f93772dcfe5440c57c748717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-rangi90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df1ba4ac4415b21f91595cee12d26b0aaa53eba546955b27d292a09b47079a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing-crimson-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a712edb2c25c967d0077875978d4444866f28c7a0d3f31dadc6d44c57ce4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68097 Malicious code in ethnic-lime-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40476612ad0eb2558d83062c4243dfedd71ae383b311f90f599bf2cfb552f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62396 Malicious code in content_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0532e1176dae94552c32378500452fecf44c9aafb10984474030c5a3607d9d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...