MAL-2025-164175 Malicious code in pilka-lniu-kanukakili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56857214d67b3876f84e72d99d7c134f33200bf5e20012bb3b739e9b3787af14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168984 Malicious code in tehah-mansaat-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb68f43e462a4c368e122b0abe6de6821eb5b9f506214bb37f46a2a9e002374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141165 Malicious code in corvus-puppeteer-eslint-config-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a339ee93474eeaf05bb0ccc6e79ce00d741a53f99c8a1e41fed151288239494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-bakwan36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7022a5fdda0297d84f61f9c4cd953a632bb98d301240db9a89806acafd30ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136337 Malicious code in putra-rangi65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde1d3709716cd17e7f4a8502eb3310b6c8f612f0052871f029b4d0b88bc75fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305e656cbe7ee90804c1b272040fa7e7a0b2466b2e61264f4cbc2dad61a19f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124925 Malicious code in ambitious_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa628d9fe8760659748736213a72ad780bc282dca9d0c0b106ea02c5981bf79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117141 Malicious code in siska-serimuka76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ef6c935f84194965c960bd65788bfb1595723dbbbaf9c81aa999efdc886b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117507 Malicious code in tomi-saguer45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa509b37a677d89dac8d1c5b7118743c215d1e7aa5afd1279c0e0bd4e742ff5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113112 Malicious code in citra-enting69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628abee05e9146293a1b3ff34b2e4f0ac8c94179cabc4eac968b385ec1890da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crucial_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1831b387d91d843dffb24dec8ee37a0db05bc168de044c958de6b9a521bd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned_carp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd57d47e428c2e34f0d2b4ee2221fbd6a65596f4d40aaa091bb655f3d80f539b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82022

Malicious code in ethniclungfishreplicateautomation npm...

MAL-2025-101166 Malicious code in current_termite_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37843e8bb32474ded001beb5880e7017441480b402bc8896aa5896dabc4e01fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast_snail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7f2b93ce3f5992e531b595ad55caa7b6845375a9bc71517806a9255b093d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109888 Malicious code in tuti-sate51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1211798337e7bb5b90a1bef2ad75833637703b3ba8091a51ee538eb356edf4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90533 Malicious code in sinta-kue26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8750fd8a60bd3b07e8120a219b917c8dddcf130b7c26f082cd50775ee3f6d610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85591 Malicious code in fitri-bubursumsum53-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50311dfdca6447d0de7ed88eade7fa3fd5ab6628903027cd0c1cdd783a1ab606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80661 Malicious code in prepared_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8e8f5187ea020fdcc51d9621b30262b9ba710059d27fc6048425e9b0869b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-teh21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772cc9e26b078982da51a29914d9735127ca8333ee86fa093195814b9768e849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...