MAL-2025-185826 Malicious code in biomimicry-kuiperbelt-castor-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad2bcd54635313a28e29d24a2fc5ecca38fe189b939fa57f7af1e460466698d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-bunmaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc6527e9148ad65dc783a39cdd16cf2608d49e4a4cf853ec29909dd5f57ca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178343 Malicious code in rubiyem-buyt-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bbe7a491ca55d5a7a003b91905bd92e1bc4fa24f7dd1e8cf3210fc8803105d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotvma-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8f8265b37210f8cd9ba83bcfc882420328710f8b26ba73a0a20450d2dc1f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhafi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2c3bae652d774482821200fafbe70da67fe620cc5fc88a0a925bf907f91269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167598 Malicious code in teagood-nalikoli43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc6ef8f66d185231511251779e037fa0817ed369ad5730a7452a5b0c893d2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154558 Malicious code in dian-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b631a4ea505c80809fa99747d5e732a1ad35501d4db847746c9e2467a6b5e010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151192 Malicious code in aben-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c0f1c36906dccd8c3680f14e875340438131dd9703c9e6c43fe30f7de3eef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66db14cbd757d35944bb0fad101f3241d42631a8079fc945c2e1ea13491e4464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-sasag76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df552ecb3bb98d49ddcc2b2d211199af7ac451663751af30ddb40e37250bde2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kacang15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39d0e4c4c7a8cc50fb5f0f30007be415959798703c5b2ac7e8e18f71ba43121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121245 Malicious code in kresna-gaplek88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15c62ffcaef6574be8d6f57293eef59d91e0b9169316fc655f21517667b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-toge8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aebd4c8179769703d0a63dcdfb4b29c74b23bc4d35874dc1de30c699b66f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-ruwet3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc88dc0181342dffcfb465924aab18e37c135fde8f4f353c35d4e709db722275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear_coyote_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612f232672f6f6a91c90c71a732071974e4635fbcbc09711db070e23e0b25de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110627 Malicious code in voluminous_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd41a00987f387ad7b5767a32069ac207d7e2d9a798d860f694e7e3244e96e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106064 Malicious code in mutual_tortoise_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594a33a4cbf670800a8e7ea9f090fdf1868e5aad72d2c50abfe994225c601a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100431 Malicious code in cici-lapis32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e207c121f842f2395438aa161fa8d95c5b233783db106735d99603a2341dfb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93520 Malicious code in cheap_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281bc5db2be94120f275ce94a3d558a0d5d101b1e6eb76bc85c918fa8a37e7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-ketan11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c08412b9d39d602c931693dc4783a82c1a78316ab3b75296c828c971d5c27a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...