MAL-2025-187979 Malicious code in mensa-fornax-chariklo-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bea88bb2438959eb72a95c8ba6f1c94ccc913f35cdb84ec7d3884727d656df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4fdc58e4ce62869f04c4d53aafbe66b38b60467bc1251d1fdd8411ad6f74fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tumva-diad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f82813662b49605c7c975550360e7ab38d289c200115626e638c0e9f343443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gagasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221d93c3576b2b362ebdf6be16fdbf0f517622f4c86d214925d30b80c3b0b67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164826 Malicious code in rinto-poke523 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbebfdb842fdb2055362786d4136e41c1a1386b489d2d3f4d04ce77aec5f2fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-dafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc930b3cb58bf1c0d8b3cb409ff81f2330935c4fe117b157bb5c4e7f53f591d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-duplex-polaris-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb146b0c2ed00e687cef5716206c265a7be0acaeff3082bafc48c1e54e8872ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid-coral-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da68fdfb4d7b9042f7bd29b67cf97804a03a65a7a3aa6f4978362b59158a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-rojak52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47901a55f494ca086e3db194d5ff10809facd18b1e2a52b7bc31ea16d7c57d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-getuk97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32115798ce611329c639b370e2cd6625c50b91d202ff0ea0f1ee131529a4315d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119197 Malicious code in citra-mangut70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9b949d1b3fad71b6b21c26095f2eb1a890b987a327748b887979fa09dec3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124607 Malicious code in zain-empal36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f3926c52cfcbe1dcd7ca5537ab216674865e3a7ee16c9a41bb3205f89bbb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117335 Malicious code in tania-jamblang87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae629307a54bc3dc7112149c91b43fdf8fb6803110591439ca9f510b389a68d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e007d9329918002f9ca7cb8ff32c77d01512ce3f2bf1c687993d84290a1c179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105865 Malicious code in minor_felidae_coffee-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a01edf65848f11bf33bb396a670462a8b1ecc9617ceab0f21b664417ac64bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-mangut31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557c3065cc875b9fde7307840fe602fe1166207583707c61a15b9bbd4d226c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kentang38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffc410e580a36b694ac3121b75a4ff2ae5a62e6ba9e35d33a7815d9cdf6be65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94746 Malicious code in greasy_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db678d5a9e601e7ed8d7e593483382ede6765127867bf85341fd7c6c9aaa9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93191 Malicious code in alive_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8381bad29f2414eef113179ac1ed1e53ec4e90ac045518600e99c1e815c4e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95246 Malicious code in light_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fab42ab891f81bdc4a088a007db643e4e774709079aabe2bdb565a7b7beb24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...