MAL-2025-149748 Malicious code in xo-electron-builder-passport-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4258594833b0af81aec1a8b3b0c76e3583e9312af81300ca476bb04013958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149609 Malicious code in xanadu-run-script-ceres-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148303 Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138796 Malicious code in inclined-black-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2705f85a0fcd905ce8ec3ebbe31f26515bd3c273b66f274be5b8879b3bfde44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-telurtahu56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5362859b605d7ec1f6da1f5ed369fff6867d828b5a857c129a6071428fed4686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926f4c7e98fdbb970fc936c7617e23d49fd8b7b7aaa4fe204be44aa63c17b7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-teh50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54cc9f4b75383525ab4c1f1cf3259adc92c60f9eee266b27e81ee0bff7bbc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133771 Malicious code in gita-esdoger18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bc7078fc504d32d2a6c8875aa01d489a64aa79500bad886d1e91e70feaf145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-liwet100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f288cba31c7536ebf6b16e33e6825eaebcd7405ecda10416c23a74ba5887b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137230 Malicious code in tania-rujak2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426686d499c572546718b2534a5633101b22f0c93d6acdf94bb7c381a811696b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138064 Malicious code in wibowo-sambel97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad05a2d7eade9023bb5df4b9fd462d3fb7373261a68643ca6c8c859ab3ae4280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kue98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e312fd1fb5627b3fcad9a024b8bde6588a0a4c62de5170b48104c8dd0fadd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125388 Malicious code in cici-ongol-ongol94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664b703dca203f0386d3402f5c4f8a36264ae0e5d522e289a6785481604cba1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130175 Malicious code in sinta-oblok88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e29442b28315411659def6d9824823379881cb491a13e34a185edcb828bb1fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125919 Malicious code in dono-esdoger41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f855c1c822d041a3c89e03b7f61ab5509a04a6e595b0dc018d4cc2cfb29e0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127520 Malicious code in iwan-gandul59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff16114f2a08d22d96a8f3899c28567a58fb77cf01f910f623a1653483f73e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126902 Malicious code in gita-semur73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000180986eacd8f997b88c66f1277634d1a4c10b38bf6f2328738c479a05cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125756 Malicious code in dewi-bakso82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0945c35af12ed9e17d5b9d8bc60858f9bafbe69dddb62e336e5c0cd0aa815d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-telurtahu26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a136911e6c8ebd35da0d881b7eb4c7788678f6f433a1d2e4f3c8d2b11d0dd414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-klipo52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a553af89c4790ccbfe3fc6ec85966ff09e9a9122e4aaaf1a299ff5a016e7eaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...