MAL-2025-181731 Malicious code in astam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696e404c1daf42ca7ea9195cf0636ecd76c5da3043dabba1fc7558e1e4965a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamalameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8e60b36ff1fb2e11d055633fa6b2fcf491fe79b30d17ae17bac8bb1c7d577e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b31b17ac545e14a60a7f1c7c65fe16a697a8836eb3fe0633c84074f827abc0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161133 Malicious code in mutdaufs-musdadaiop-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be255bb0d74d83998357a342aca4712dc5aef2b9e188fb17de895d8763fa6aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-enceladus-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f303dc4fc3654d2483f1bdbe2bbcd9922173b5307487abd9154297d5ce82c078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141018 Malicious code in concurrently-ursa-betelgeuse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cec0f8ffbbb35058704f59236fc00d2feab74e455c018f7971f2d20d13b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-amber-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3b81d04b3eec8d7f7df1055c5e60213c983872f9d7c77f0b56a5b93294253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-kue32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1fef17ee4c5f641a5e7d7ff3ddccb56c7f8dc9796f164c2e631c53d701c4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104805 Malicious code in kiki-peyek96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747a43973d84e10cf7c9ad27c0c78cf5811ece4b3da86ae1238bb1feccfb0646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e7d8ef9daa81899f42e2aea6b4e8e3e6d285c204988fc33dfd2f214c747722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97960 Malicious code in jaja-gandul73-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 237dcf2835f11f465805e1dccd9b712fcdff13d1023077e397be7ed73326f575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96639 Malicious code in smiling_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755b423e9325c2cd5ee656050d004c5122d6a6eff2ba8935e3c6db74d74e2507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-taiwan70-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1def0f0183b85d8d6fd8814fd7ab9e7186b9eae77fd85f4dd6340770c98fe898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79568 Malicious code in laila-liwet93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3027a1ebd1f9ee8f1b71de947f327a574b59b04bd74bbc8b7589f39252fe408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72176 Malicious code in budi-klanting83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99cdb73745350ff4f1d3563f342376cc9617b3639296a246d2df0b413e114fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63903 Malicious code in kurnia-tempe95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8129504f3f0d148d6abc8817a0be9e3b4d74ccfa037b3ae54d13b9ca5afc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...