MAL-2025-186122 Malicious code in char-double-load-notify-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d12118971bd0678f5c5ee873fddbd6b6642589f8c817d45309c0210b7bfdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181850 Malicious code in avangs-olium-anaumini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf230fbb30da9eae554083e19e5afd5249c106761abda36efd5d2722cf2bb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168121 Malicious code in tealove-boy16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02455dc6993c60cd8afb29c94ba0f3e62e295c98bc5bd0dd2c1128350ae4e67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusia-tavil-maasdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c583276cf43a0f592d9e0e5c26cbb3e6e9ab9c3e3a7617ae110d5c4ecb4c768d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156327 Malicious code in inagi-vuma-nnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc17822ce78cebb529721c1456d9ba1f878a5e1639e6dd8dfb35a79b92a9cdc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133979 Malicious code in hadi-tahu51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3194c71ad1b3e5e5ec84b8edfb6dce7dc7482a070eb5b5fb778560cfea10217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137708 Malicious code in vera-kolak42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce10cc1017f93408b807a76f6841ea5bf84e0396ca329504baefaace682b982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gorengan8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5d8c5055c8570e800ea4445c40ada51e7b521c31787e9cc7d458ab05297de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a6c0db3cbeb5bcef312589e6ebd427aab012c5fd417cfcdeb6c5a0550ff177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-menjes89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e26c2ca5bd715b4dbf1ae13bcd10dc0492957af70b68207b0005519bec680c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97a9aa9b97bafbc976a6708091c1fb44bf81adebce84ef3182fa1458b01b6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95916 Malicious code in pleased_ferret_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ac7789d5306e92e8eed0d4aff5852290cc2e911ff296e21c4a409818ce8c65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64492 Malicious code in nina-kembang98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c508694995ce5b45d098779fd9d0eba925dd9f30b0c9fe6fd24f7b5df303dc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kue82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0332d36c7827d092234958e8141519e11de2a5f337bf02580937685e0a0fdc1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...