MAL-2025-165567 Malicious code in sabuvauakli-nalabulaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55bb6dee3134755dbf9204c4fe12beb191744d2512af24139870860ba910415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170052 Malicious code in uinsu-lotsi-banibauliam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9ae68367cecb502a19db7e599febf2753499f6149c1286873af09ac9b7a1c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154317 Malicious code in dia-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543a514968443d172c439dfed7902701ee20c95cc1458ec8a6d1f6b39482f010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foori-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35be5fae788714dd3753c5213c2703ade5f5ec11e1a172c5fdcd72eb042a38a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454d3d0d6d5f842d4c82e6795470f4c212f8b5d09b75d5590f7b442d8a251711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166691 Malicious code in tadashi-ytu-buty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3db067452e75f21039cfdab9e86a1ac30dc4b4cc641726dc0f082985715398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168021 Malicious code in teagood-yakuza61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3233c2a30487911d7a544a3493e7cc8af26ba55e708a84b9f0d898f3d0fc57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140138 Malicious code in browserify-quantum-puppeteer-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0001b5e1e083b4a1f3972c69957ff451588428b9242c25d7a98c437e15664135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142075 Malicious code in envconfig-ini-zephyr-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605fe81490d64b2c1a772699d84c2999f71b970b02bba2e93361a77189f5dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144039 Malicious code in juno-style-loader-sedna-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb1edc4673f0ed82d4bb87c438df25a1a79f430859c6849eac0dc14a34c4644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-fornax-csrf-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29fe4511695ba881d70cb9d7a2fbe076c235ce8bcd732b3c2f2cbc7054cafc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140470 Malicious code in cassini-mensa-kastra-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3159ca473ca3810c1e97cd5748be5958ae8417f1f88bf30e7e1f6f1ada5d4caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133633 Malicious code in galih-kue28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d4051c9ad9249e99d923f33b70b461574936311d1e14c8d886825265549a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lapis65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14baa18852fce24dd77e0515456d6b1535f5982afe90dd919619396f0e5adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133936 Malicious code in hadi-ikan73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc95b3c73890b072394766d9ccadf6b1a55543342d1440214d1a0ad190ad208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-menjes3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81afb675e754167525a1b2a3622a70d983c9731f3f58956fda4f9a20fdededa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-asinan22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff9ed2018a00963c8c6e043b1972f9e98776d8bdfbda6bde72ffa2df544c814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-sego82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4037f3e3aa0cc74bc07ebdd7a0904aec11de5f494b87be8d623eeea479fe936f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127367 Malicious code in indah-keraktelor28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4aef5577e5fcb468397483f4283815b9dc7628a0aa887a8feed2050ca7ee945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128121 Malicious code in laila-enting31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21a5ab9ca978efedb897a1ccc0899c0d26d87b138a21c6ec338cf04d4ea4b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...