MAL-2025-184257 Malicious code in modiov-khan-avcafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bcc080696620753cd341e5af281a6d59099ee273433d0c0500653c71d581a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166929 Malicious code in teagood-lokika62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124f1ae5dccdc31c3245dbf42edf26937a8c0e4d6e828afdf95c33db87c092e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-ultra-spinner-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4385603b947c7397e51d58aac7d7b05374d2f684bdcdbcdce3dfbe0deecd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147888 Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133809 Malicious code in gita-lapis43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a1651216e42982773cdbdc76a29778120b8c48775d7f763a888f683810bfa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ee80001649f8849bbf06cb8288818e5916a91a68ec3f37530d2db6dfac2eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114212 Malicious code in gilang-pisang4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25d6f91b106217829fdce96316a3b443716d2308dd671115f439e0a82fc6c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soxfiv-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf6083bfa07f4cc63ad71844f681eb60da6ea15cdbdd1a6819bb44b6239b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766064935aed472417aaafffeb952337246e8e7deffcee0f3a6bdfa2f4987c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103787 Malicious code in horizontal_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815ca1d7488bfba6ada2055f49af1a0f3d3b47c8e7cdac5e71b0d6a4b2344080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83131 Malicious code in ancient_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bcdaafa9f1f70af79206c2543a7e356533cec3c2793ff4b8cdedb2be96858d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72335 Malicious code in cindy-gembus68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1535d95c7760393e0ae52cce19c5861b25fe59574561af91412f9e538c0b35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-lumpur39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550b41ba409303dd25c91fa87cda79df5277a1509509e686296c2b0a7b08aefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55101 Malicious code in adjacent_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855455726b6a7af32a0e41540f3164cd347f38c5ce4d00cc45277a875c1e4616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52986 Malicious code in jaja-tumis10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebdd45aad5896d1347808c7869578df572954ce1a353ea2f48dcd63a33758c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...