MAL-2025-154075 Malicious code in cinta-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa04eb3e6728887ef2dbd2529391eb495d5c35e4597b9bf07dec1add9593f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139452 Malicious code in antd-async-sagitta-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b06b3318adfe4495009692d720576dccbd81fb74b2e9c690133f67d70fa5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138903 Malicious code in nutty-emerald-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fa4900235fb6f238809419cd02afa43297d01c65ffd16ba7c6e7afe2b43ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-gaplek64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529bd51d30a7120d6d4ae3318d90a831a82327b0d2a29860326949b132b3d96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138520 Malicious code in zul-brongkos23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476aef8d43b5acdb9a0e05f02d7e5564658ddd869306c481482c06d9bb5abfaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131923 Malicious code in ade-sate62-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba07716c586f651bb5832fa71a63f4aa5f4cb0eedd3903b90ef40d196179b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-enting17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ac9f297af92e335a1d6a387a65cced8446931fc3679f5d35dceee2c639c077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-oblok72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f54591e6524cccb7bdb6b4d0ac028ca7b290e5dd9419fddb7fefabc9ecc863f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-sambel77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3de8bc9a6003eb82f6137407ccde5400b9db4850121854a84b0bf0f4ad31e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131814 Malicious code in zul-gudeg53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fc89fdea306f3896f62a1f54916dabcb0c1ae781655a65028f391bbe89986f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-tomat13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0dc13e7f63c9e2662490b5fdf7603dfe80e8e963deb470ecd7629df6ebfd4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118788 Malicious code in arif-sroto85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5687422eef9538b6cc0a8f01c882b42d60a256b004109304157aa74dd98616ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a21857f634653c34bfdb043ea49e89927c1089b26b458dc02ae6f9c36ce973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115806 Malicious code in mere_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee063dade003e0872fcae09f3a29e5cd1b7c488dfc8812ac97931cb42ddab51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118505 Malicious code in zul-mangut63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153e9486927c0d9dd50e487ae9b407a7664ae0178ca9cd2a7f2bb106e60a71bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kvgnvn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36cdbeda0d18303fa7faa957e12b2621002d5d9abf7093d03701382d25c3041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grieving_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71b8a4b3e834332fae6fd10680d71d88bc2be908a02b5d3a2b7229e9322dec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102412 Malicious code in extended_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc04eca88adfe580b54272e3382363c72bc8c92a2a883b2ff62918af1969812d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044e9e57b00aff3484b6ad9f108bdcc26715b6b67c1e353a2d30874868806ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_guan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f66eb2c5e30505e9cc5430f36bd2270d77e2de900223be77b4a475e4bc0dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...