MAL-2025-189923 Malicious code in throw-analyze-cat-finally-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e41425f8df19c5975972c368e0ede064882c1221ada3df40871b15f703b3667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmullfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4dd6c87dac47abe0d3558bb0e33ff8616fefa127701a503598b9f381125b928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184689 Malicious code in olobc-uyg-ugooffahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af11a758175255c4de58d55a66c1d7550a96ad49db839232007f8e91ef057d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184380 Malicious code in modiov-kihan-avcafivuaviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca88ec71734e21fbe6b0d07d2659f957dc9fc0051e34e87b70baeda7c4afdd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-olpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f148bd95858ba6f38b9a4e2ca765c7b5b3e050021ba9ba4302e133de44ca9a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxyhunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34775e175586272c53a5ce8ea349326b616aed74ce332ada2c0a89ecf8416a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150046 Malicious code in @mipta1/htssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107611e4b2395a36a66c47074d5fbf3a7d4e3a35ffca6b8487ad796faed1f9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afigaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd559af2c5593ac55eef80a9fc7c1f0e966aac3fccd6d802e1821be0c675de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146292 Malicious code in pm2-apex-antd-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62bcde48ed9d8284f245a51dade1699959a6c5392b1c8ce1cf1f0aa82067f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-jest-sequelize-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e8e8e3f60647fb8f627ae04557661e87923e588fb334d4d4ba33d2b9b02584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135587 Malicious code in moral_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d4c623fd0d90883b9d3d8501cc361724602e94977028d652d4715e97e55821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128700 Malicious code in mulyono-ketan96-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8feb0f2fa41ea574ecb6439854906d351285a46191867b7f733f8cfe62f1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117963 Malicious code in wati-kentang91-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641bf481618a79ae8935b325d0992412436db0204b74f90cd0e88d2894107b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117646 Malicious code in umi-oblok83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ae5a336fe47e734bbc9679c88a1c18f8593e0a1a4dcdcbe42082101e8d53eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114951 Malicious code in jaja-bubur55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25f5c8edae49e0480aca1fc97c8cbab6604b79e93b051403a2ec64f6bff7649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_bobolink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7beefd36a4c8985bf9ce124a1eed6dcec7c1cc7906041b8d40e3b4b2116a703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102215 Malicious code in erwin-lepet3-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4448a82427abfbc69ae87a55edc537d575158293e92d1cdc5d545252471f4227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-tempe42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3ba017e09639eacf4b0db9eb291d2307302bb9fc007f71ba2c2fb452117137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c0a8cbe03b1a18d183ef1354165f4515ae95e958e38e93830f888ed99124d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d6325686b360331508d8ee8ebc71676c57b4fe84d1a0d49fe1244504953669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...