MAL-2025-143705 Malicious code in io-restart-less-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f4d0056d31b5a03779d08089412376d33984c089f20b0c1f39e54e7df1036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-charon-dactyl-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb076b8a92826ac002b2ee673f2234d7610855e9af4e253a5bd890350ac07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142153 Malicious code in eridanus-nightwatch-draco-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897faea076021827c61bfaaf49e286cca7ae17bae43b9fff7e94eb35c29e8b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142440 Malicious code in fetch-deimos-acamar-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b897e3a9820ef17d02f095ee4115b692e66dbcb446858ff17bb002112e015788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud-crimson-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c1286ca9bcc2c22afa783d312250a4e270c79b9e27f81268ace3058bd40df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-brengkes67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ded733038c775c1dfcdc41b5d289257c13edc77c75a2a78d970f87f882cb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-mangga35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9641d06f0614921b402b24acd3140c2022a4516391a9bfe3019a47f6cf6775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kacang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8badb8571149901c3ce8970d43df45a32fa04379f89d9e0f9bc56f7d13699659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136545 Malicious code in registered_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d5b92156973565a51da48210eb668dbadd63090bbd7e564acf8b8c6cb5c4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135257 Malicious code in lisa-serabi63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40af467331e1c83662167be59f967295c8d873a50bef16bfc00682c6aa3f67d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef31c78684c8daf876f5cdb77cf29b7fae56c3c293db93cf062ad6941c3b2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-getuk98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260f6d16111a30945f9d31407667a2beeb569a1badb7f8558017218e4261732b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-dradag97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67dd04293ca82bfae543c9008f1b89b3484c02cadd6a47301579b24c924886b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126342 Malicious code in fadhil-gudeg40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcd02ea291a336b4ba91f990e9a6e9ac6540880c25d6e041a3cd902a15a3c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125268 Malicious code in budi-sroto76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e44197008d93da18eb5db49d42019f53c0f36e5cf7207d2ecc1cacee6ab53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131246 Malicious code in wawan-lontong16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf96cd4dd1a3ef99bfa4de40b1756e9279cc140bade34afcbb10f9e99d3292d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129984 Malicious code in rudi-nasisayur45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 090aaa4e37b6b7b75f3a1ab2f271cbaba4d29e8b4d047afc15e7de06e0df8b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126828 Malicious code in gita-jengkol70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5eefb51816937f18d57d2411568782e9144ccc5bccc7f18acdb70ee1319f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128223 Malicious code in lina-lodeh35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e68c8051b146b9d44ab01fc751a69d88c5d51a0b707fd6e9f5bb98aff00e027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-otak-otak41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0384037c3608e1362a514a9dbd33155b21138a4b64bbd9fe0a1c57496ead3f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...