MAL-2025-182990 Malicious code in itale-dci-jyhfyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d93ebb2dd845f1db7f13af9cb43306e82e05c413f5ac65b9c226ea2c639c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520e2561fe517184a8867a6f8b20132e0af761d1ffa09748f63401fc064c0ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-goadaotda-nutdardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47e117c8f9de26eaa8effb6468fa0db9af5dce63a9491316b847f6eb0a027c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758e08e22d46c68e7e0fee568a320f6f741e10061a3d952530a8c90615fb23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150705 Malicious code in @miptaa02/gzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67545ce67a79c8c6155432eb2bba485622ac33c4ef76c667d8fd0b1abbc822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161159 Malicious code in mutr-sds-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a145a2e489ff790dc9e8ad5be487ba240fe2a8c65b1f7db70bbfb14f39ba12b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-kaus-install-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db6ed7182c80f2bff1213f3c1d1b6395ba3709bf4901536c388e34b08b53060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795caab7543582f8633b47e154140f83bd4be654b18f32727163a04e2c70308d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-botok37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c52e16799dfe440e5fe8addce0e5437e30697367820d08af25d1e224613dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tahu44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0c41275d5c77a50799588b7c76a3b9995a37e777761da265c7888f4a49dc5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anonymous_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de6f38212edbf606b1a7ef153f0e84c497d842e9a2c89f0b9dc10531b03efdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110371 Malicious code in vast_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ca9552fa8610973539579d5164592ac5d92b641b5ca47c4bbbb044af17de52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-nasi6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49546db72518c962e0cf5e16c6d1e27dc7a5e81f7079b46c948df089db130891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-gepuk66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98121a9b5fc087563fd0e9c5deae7c9908cd9bf828c59775d009bae21823f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-menjes9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b0e39a5acd856829089444c135ad47b73347f496ebddcee080ffa4685ad7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57624 Malicious code in minimal_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f8705cd60a6a9730218e3358a1f0ece2a53bde08f34a5dcd93fcd292e9039a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...