MAL-2025-185691 Malicious code in await-figures-nodemon-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a869a28f31c40cb68319afbf18203d968e72964b99a41e113d39ae9f9c6b6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavisvoemolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962607cb45586f2764eeea9e30e1d283b9636cf945d3d9cc828b964090b7f75b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152694 Malicious code in angin-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d560712bf43dd69553bfd68726aac8cad3ae6d1cb54ca40f3c39718780267a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naikufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec428aa134d7eafd24ebedabe4cf4c5b34ad71b680de2ce280e42bc6de0b58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-standard-dependencies-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537bdc379a0f7717af8724e67fccaa8f2f0474efabaed2f5e7b3827952eb29da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kupang19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d229c4137d330ace6afa3a21542f24a2a29bc3174432dbc308a17907dd21d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82304 Malicious code in wawan-ruwet50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865bca909dfefd36864c35cf8c85a7a1b45027b4f08e31762cd95c112956bda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66630 Malicious code in acute-coral-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16545de8ba919418933e1254d4acf55b5677757bff170f418d20b00024f07d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back-tomato-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc9eb96f6ea491f125e2a8ffc9ab979f049abeece0051f7269e05d6a12ecf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65516 Malicious code in tania-enting16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41ba16489f44b636b552e11dbfe7e741104bf95dd7fd25e2170355d55049b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63459 Malicious code in inclined_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9ac2f82d1b30e5e15dc099532caf5ee4cbc6c3898e2dfd6e2d614f1061e9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-tahu81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d7d5487b25cf5734d6c71afa399d6dd647ec8e466ed13af6acf473a64aadc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-teh15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffcd6602ae814613ecf8efc41a922ea7445cf16da8d6457f6dac3b76a488bf52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54235 Malicious code in putra-lutis55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1503d3a96f80148b1174ab12255db9179e2424d4754a3ea198483181443488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...