MAL-2025-188653 Malicious code in phenomic-got-norma-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a9d6a0685ce9363d32e79a51120d0b4ca86288e24249fa2720d35d762a0c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fia-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ba3f0cf85371a93ebb39bf9e079a25e2453cd0c3128861a89a58705a5cabc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173886 Malicious code in diva-bani-imbaabmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb95e4ded4283d2f8997445fece4f2c8d9b4d19ebd978c8d04957163aa0a34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165430 Malicious code in sabua-muyafig-budaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a6585e5c96d455a7714e34560ff7ce2d47c63dec82ffa4e38e223a33afa0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nibli-luyipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3f4c986ceadd686ca4e4e28702bbf7e398d61c57f46a747c8a66ee7e623505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-minpori (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255c585d7b9c89e418211f9c8058dce7e2a5a1e9072ebf7fcc9d7f0a08b645e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167051 Malicious code in teagood-lokina82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627af25a02d771be667a7c38a9e6e0579bf6b9c6ab941246aca608a6df615aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-charon-dactyl-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb076b8a92826ac002b2ee673f2234d7610855e9af4e253a5bd890350ac07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135257 Malicious code in lisa-serabi63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40af467331e1c83662167be59f967295c8d873a50bef16bfc00682c6aa3f67d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-mangga35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9641d06f0614921b402b24acd3140c2022a4516391a9bfe3019a47f6cf6775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129984 Malicious code in rudi-nasisayur45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 090aaa4e37b6b7b75f3a1ab2f271cbaba4d29e8b4d047afc15e7de06e0df8b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-getuk98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260f6d16111a30945f9d31407667a2beeb569a1badb7f8558017218e4261732b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131246 Malicious code in wawan-lontong16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf96cd4dd1a3ef99bfa4de40b1756e9279cc140bade34afcbb10f9e99d3292d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121457 Malicious code in lina-bakso90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b56220b8aff0df5d5d30a28b69148439f02afea62fd7a7d8ea8391a16f6961b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113066 Malicious code in cindy-enting25-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b097676885bbba2805ee340e62cc672d2830e9061f0ffc924bc85f4e02194d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111527 Malicious code in zealous_condor-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32ed84c476498e07bb63f5e5190a71520f1d1c40d6e2ade87367ae9a689f29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kupang44-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f1379700e7efab035253337036473370a7a484ffbc763251d44e75983ad216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-gado-gado47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8fe3d0e36f8efcecb649a355986a1fa5b263ed69b59df73ec9ba58ad5dc6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b910b2d9307ed400a1141a3f4b9ee79fd1079b2205a4f44cccee6215b0dd96e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96210 Malicious code in realistic_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9fee092fbaf8d4f0d1bd3b6916ef9b1298e7980363bbd58ee6ab35b55c0fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...