MAL-2025-181970 Malicious code in flights-lutag-obolavuhaduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287c45c748bf11a549c6361ae5c2996f822777042af00c5f93d49dc66ac3e7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173432 Malicious code in buta-fipana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ce31cb3ef613587728b2c43054723ddd59af102db1642759e87569f2e37c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157461 Malicious code in kapvino-si-fagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9cfd7558b0f2e613467ffec57539b1fcedefb8b02d4028fb662020b7beb022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169174 Malicious code in trevora-cir120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a9a561dc3ebd6c2ba3776182e09fc8622d522079e4035162c833f71877420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155768 Malicious code in hariyono-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59161311043b8ee9e7f7fcd8ec2e96929ede59a77c50af9e1b9f6613047cb0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54ccbad0f9ca27fc01f1318c5c6efa06a135fbbc491824c9735975bee4ea506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134177 Malicious code in hissing_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c5a0c7bafeb0c64a43c2f09d50a915f0a4d931ac4cc00dc32fd648e49ed72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7270ab468a2242eb8bb1e8679a329c5b70b37f47a9915c256b258dbfba2927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132818 Malicious code in dian-lodeh6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 355ba5d5993d6bbd6f0ded589b72ee491eec9e6a862ce38664e94c6658de8cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134807 Malicious code in kiki-lengko10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c691249a6baf6b23b17951bdfc7110bce2284eafd367dfb8d422b8468280906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-sasag90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8ac6c096fe62379b7e5167e6741541d7f02dbb6490c327d4dffa05b55f8917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120846 Malicious code in irma-gudeg20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ff4d20eb10cba5ed2fcf8002d0da50471b8055dc57a36877f8f0dd673f61b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121405 Malicious code in laila-kembang57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0a292a49fcc9ab9ae2c781addc85d9576e1791900ec4c7f56e408b3cef7fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116588 Malicious code in putri-sambalado88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975cd59443c5ebf91602b655c7029f912ad753966a980e06790f7d267425818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83757 Malicious code in budi-rawon71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3181364fc73e1486b795b8e134ef7daa3a8136c0b439023303aea649dc62ae17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88007 Malicious code in lucky_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b640549589eaf89378fffa012d705006ba14fe209ac75159c279d821177a26ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80506 Malicious code in oktafian-kacang26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100de561323be4d3ef6a3ef5475556cc3b01ac54cc91b7d7422995d0ac2ecf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79809 Malicious code in lutfi-tongseng75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288d1c9c2e3537eb59757f0f741cac10ccb509c88b14a174422a8104a5807810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76408 Malicious code in yanti-oncom19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e43fe3da09468c4f16ab1564bec7842f229cf07faf98650f9a9260bae53cd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70908 Malicious code in subjective-turquoise-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09af885d3bffbf8778bc41d2e38b029a37c62295ef69c07b3fb4bbd10806dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...