MAL-2025-187444 Malicious code in impulse-figures-inquirer-oortcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38d8d4fb510c1c54c1d27c641e6b1543a070d7cbacd039c962a793177528edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184547 Malicious code in msokidt-avog-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92731012b6a34346fc5ad405c663f2489fd978af459d770f6d3303f64bda6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174062 Malicious code in divata-tugab-ivacavafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b969fc6851c997d6f3dbedecb5598968f019781f7d76e58983e9909ac5133a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotimi-knubakasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 804cb3fef7eeda541666c81ccb6e38ae88a73979c29ad8504d86045ccc42f3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eeb00967572cbddf9efc916b2d24a90b526cb31108b9193dd3757a91ce7763d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162572 Malicious code in nokire-genji799 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295b201da84df6fa04c720c18679a4ba17b22662456cf3168910deef9600fae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0afb8fbb65960b87e76d4578ff06d671acf9d2aea7a96ca0f283efcffa12e50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-xerxes-comet-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf07766d12753bced2182938a506ecdf512d8e1d4fb358d5195008a425611e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140005 Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kentang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6bed8a265644246466391301f3703a02f0a749059776572e099ecb09a7211d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-semur31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07669a47d9f30248d1f2956e9f708180ba31ee365a64fa2c82045de5c138d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-klanting15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1ed9d6dcf6683713172b09f4a276aa090319da6fdae308aaff7c1019f94151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_goat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525ef5813db54e8dde6c5af933542000f9863f8625ab61438bb6a94b2b15306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100678 Malicious code in colorful_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b707f0d34b4e3b33ef198202ac446b898dbcbf828643bc864915b72738eca43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cruel_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87e41213732c581deed5c3df79b634b46ea38c47662fceac850f32dbe84b722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7db024ee335ff106ec67ae589da8f21034e2c99d1314b45ab66e36d5557526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97030 Malicious code in tory_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6978499d1a3fd88fdd91fb51773450c0a3354410f02bfd76dca06020eda8bec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93876 Malicious code in cuddly_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1246389a7c23648bb78d135ddbcdde1298d056323cc097401e412f4821352c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-semur93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ca9dc68efe9dcba362f58dea6d8ea99fc4b30635300fe0364ee1d94761b0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84463 Malicious code in dewi-botok54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f29dfd20ec2ffb8a5f69d0949aa337586c444e5513bbf024a64f7b3b82a650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...