MAL-2025-185826 Malicious code in biomimicry-kuiperbelt-castor-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad2bcd54635313a28e29d24a2fc5ecca38fe189b939fa57f7af1e460466698d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181887 Malicious code in avarag-obios-bidala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e3553b88dd8bce29840ef7b04dc8ab513fb2038d77e1b44aa6a61be0fd55ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178343 Malicious code in rubiyem-buyt-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bbe7a491ca55d5a7a003b91905bd92e1bc4fa24f7dd1e8cf3210fc8803105d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-bunmaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc6527e9148ad65dc783a39cdd16cf2608d49e4a4cf853ec29909dd5f57ca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butray-mutio-tuiuso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417e6f4c24c7928d863a05b253574c801fab1cee92ab3fedc5626da387bb1e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotvma-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8f8265b37210f8cd9ba83bcfc882420328710f8b26ba73a0a20450d2dc1f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151192 Malicious code in aben-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c0f1c36906dccd8c3680f14e875340438131dd9703c9e6c43fe30f7de3eef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhafi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2c3bae652d774482821200fafbe70da67fe620cc5fc88a0a925bf907f91269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154558 Malicious code in dian-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b631a4ea505c80809fa99747d5e732a1ad35501d4db847746c9e2467a6b5e010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167598 Malicious code in teagood-nalikoli43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc6ef8f66d185231511251779e037fa0817ed369ad5730a7452a5b0c893d2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-cross-env-socketio-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebe0b6d512b1d735f630ee7d5d374f7dcbef74fdc224df629708d129a90740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-quantum-public-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124f32f9ca1bb4dec77e4c7dfd7d93584f92b71a291ca7d219c1c986fa6a3f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-oblok12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9d0add44c5dddbceaa3319614b1e1572b8b6044f0935349d89d566f68774e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66db14cbd757d35944bb0fad101f3241d42631a8079fc945c2e1ea13491e4464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-tongseng46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f445b432969b913e6241ebe4330b9840fa2a8809818a6b1fe74ad4f1852e53e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121245 Malicious code in kresna-gaplek88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15c62ffcaef6574be8d6f57293eef59d91e0b9169316fc655f21517667b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kacang15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39d0e4c4c7a8cc50fb5f0f30007be415959798703c5b2ac7e8e18f71ba43121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-sasag76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df552ecb3bb98d49ddcc2b2d211199af7ac451663751af30ddb40e37250bde2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-toge8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aebd4c8179769703d0a63dcdfb4b29c74b23bc4d35874dc1de30c699b66f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-ruwet3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc88dc0181342dffcfb465924aab18e37c135fde8f4f353c35d4e709db722275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...