MAL-2025-186637 Malicious code in draco-convict-carina-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ac39405d373fe12213e8d3838763c38a7674b0f4ecae50d5bc7ddfdd67f77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunai-cuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04fca612a121a1853c51c82e0d3a9163b5c63a5dd2cd850cc9feb2aa5c3de39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176331 Malicious code in nokire-kushina11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f255e19514cfd1c19e12a16ead5d71d1dc18e8dd31081ca1ebc728a941572fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144039 Malicious code in juno-style-loader-sedna-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb1edc4673f0ed82d4bb87c438df25a1a79f430859c6849eac0dc14a34c4644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128121 Malicious code in laila-enting31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21a5ab9ca978efedb897a1ccc0899c0d26d87b138a21c6ec338cf04d4ea4b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127367 Malicious code in indah-keraktelor28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4aef5577e5fcb468397483f4283815b9dc7628a0aa887a8feed2050ca7ee945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131731 Malicious code in zain-taiwan40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a05c15e1624425d705fdf5e9691f2fef8df1079679dee0dae58af17fd9140b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122696 Malicious code in putri-rawon47-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bf74145d1a4483f9335764e3185e6220826eee91e2109edb078d42e6e735d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102936 Malicious code in friendly_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096491b58c4b514ff4366ca820ef70febb654e0a178f9e7f27c34458074e7027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108586 Malicious code in shaggy_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01584807ed28984b5e0258a9ab3f7c693ec761a56a7ae761b92c96796e4c2888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95829 Malicious code in panicky_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf40b58e74b6e89e8c054193a5fcbee4ee16d38eed087a88081b115ab748a51b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87554 Malicious code in kurnia-tempe23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdac6d9f806e84b136bcef159829592e8db076880c5226a3077b2b976c471947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88850 Malicious code in nina-serimuka58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ed6af41382ce85a6a6e0ade3df09c48c66745c1ed5cb5b450e21f443a0fedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-red-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3d7405795dc54a69eab4fe2508cd7b65b613180af0cee665c3d8c64658e4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-mendut46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d90bb58136a1f573c6302d64289f9de858bbddebc9d6552cb5fa1a6f822e339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...