MAL-2025-188752 Malicious code in plutology-fusion-interstellarmedium-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35960a2e783fd708a06c72b6b350050e03cc9c26a05631b4ac3c5ded4e9e70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-s-asasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e94497e27316778c49b27f404433f722f82e4ef432b411dbc36907c53b875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d41382c6f1312159481822f93a11ac7a12fe492d133f34ee60fab8e8400685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-algol-npm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df4076437c513112089b53d9a85ce5172d0f134afb19ff5def94fb7a291385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147044 Malicious code in rate-limiter-mira-test-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e4c2087053867386e2676432667509cc728c02281ab2bf11291ecf3ce2352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141630 Malicious code in development-rimraf-celeste-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ad97a47b8597cd4be29bbd8d61383aacc621bfd566c5b2f523e669648942c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142027 Malicious code in enceladus-elara-antares-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73ab186908d9bb4dde5ea924308195cd1301dab2eab46f92417521d47311c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-ivory-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82eb57a35b29af05ce640fd9f792f96f2540ce409d14ad557e0b3bd7043045f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bfc4d0187dab76b9e4363c9ca1e4243c39bb722c945d944888dc8374e49478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-bubur11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c233a7ce44b4a6b93f3f81fd3babd45c9a4db4df150eeae92cbd18ebba915d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129095 Malicious code in ogi-klipo41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f1ef41f265c36bbc3fc88f6addeb5d909788135f33f213d2f0bb0b82a38410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kentang13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6aa067f428fb409524d18b9a76f77f44840fde795bcf7d68280d390fd49388b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-mieayam100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c573c90e0e01381d0a6f029842d20bb21b8f5381ffdf56cd5f82ac617f7ad11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilstina-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88500626fd084189e9b467b062532ac4a21e399036463f6b8468bc7e49bb351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107238 Malicious code in pretty_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16d9b835945db697af3115607441461accd8f6735080aef4d34432b592b7019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100799 Malicious code in compulsory_grasshopper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343ed15677b2fa69882f6096120eb973bcea42e7af9fc957b6cb57478122c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-rawon69-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212322ffd79904f3c7689512b562d3a06340ee4adeec78c8362f645a0be4bf46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd0ce8afc8a939aa99010f6bf0f1321a5bf7b4693e846f74fc5fdc06d00dd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-martabak67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67951716a6670107b99d25cedb4bf475a1d2ea8d2dc41a9aa0e4645d161f1f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82972 Malicious code in ade-tiwul61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e9f089251cc52d9ca957ce3945194877f34babc169f27e256818723262871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...