MAL-2025-86141 Malicious code in hadi-lodeh90-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7485386e560d6484f83adc2a32a9f6d2a0c64b9807553fe7d26370a62f4ca474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-naget87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a563825280300156bb8b170760bf1bc49830749f22c60e22934936416b333f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87686 Malicious code in laila-klanting69-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153c21a330afd703cdab1a85e16c4919c08bc6377dee727b04f1592081368929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76974 Malicious code in basic_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5dbd7c345970db62f4582f5fdeaa6e9edf0397f49d433b657c16ec712cbf68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82330 Malicious code in whispering_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277e8ae39cf90e9b77bd7a34b224436fc183fcd549e5b4d0700c91c4c160cace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78838 Malicious code in hushed_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed97399f574e8dc08eb5757ef40b9a7b1651daecbd1fbb612f775e3ce62c21e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73788 Malicious code in joko-telurtahu96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7f25bbaca73608e14398231aedff69605ff24ee9e33c5e845e082ee2f9b1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73651 Malicious code in jaja-oblok16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6428138d37df89460eb85999de0b17f9f2adc3f0af3df1f73703a8a5105afd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil-apricot-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe237b6ccfe4cba6b92ec7baf7522022b3dd6e735ec0386b0da931782ade014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70324 Malicious code in renewed-yellow-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6842cf3d1cd5125efb1428f229d30a5746a664848e9ab304e7ef8f3cf9e3ecc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-otak-otak56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55146aaba0a4271c037efc2773219f00c580263736108dd997d2c83e4f14292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64650 Malicious code in okta-brengkes36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a513e6c4f1dccbde7822bff3741fdead76fb71d0e5502e4905e57c48ea8a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62086 Malicious code in bella-otak-otak56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c1a0681acb90311ac441dc987498c71830953d845dba47224d44acb0268477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62384 Malicious code in conservation_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f927a70d6b50b53069929d82f175a9254013d8ee8f84445c24545e25a57ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-tapai64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b74f6528790faba566e300347118f242afe24c214ebfc8960f8e4db7c68f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62409 Malicious code in cuddly_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a7d0fe2b20e218cf7006d8fe25486e469cfde2fb69f3b661238205cee36340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64652 Malicious code in okta-empal58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c14bc77af686ab96a43e27dcffd45f20aeab2fdc3b87a2fc06fc4e9dcd32bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14583a5ea9e38cbe083fe113b9dcb26348ba59e66b0682a7bea992ab581e8c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55556 Malicious code in cici-otak-otak100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae647ffa7b698620adbce9113aeba2ebb0fbae4493f74a23f480c54a93aefd01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-miemee90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beeb56020ad01e91fbe3c83f29bce37fdb39d54dfaec73518122fdbd58aea21b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...