MAL-2025-183262 Malicious code in kisut-diufg-difvatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244d32d447bbd967a6895ed6044f0580769c2f95fa4d05cb2c6d5afd92f260d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safiagiaf-cuagaifagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4eab3b8dea9bcc32bebc8afa3d5ce97ca73b75e75ff9c20d7bb3209527fc5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165985 Malicious code in siregar-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcba0ac9447bfdcda6fa59b3e7c4e90b2315430e254d9934922df515b6dabdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170037 Malicious code in uinsu-loti-nalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb5465227fdf421121f61e3f8234b9197ac9876abd78c3089b7a5ce86b44bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168838 Malicious code in technical-albiko-taovilanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e8b0baf6ee34742d7966fab79c06880b371896e67a06e22a11dfbda9c49a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-equinox-materialize-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c75f5cad1d0c66172e8eb6edea35a3eaa1ad979c35d1bacf45c4b3044eaba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kue21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70dc96a2cf21fa9b301424172741454facf735035471b1e8c321b02ec5510cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113261 Malicious code in dangerous_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d83a24db1f8e08c873e9476c86865df4c9356d3e4d575b1bd9d8597b2fdd065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b707f0d34b4e3b33ef198202ac446b898dbcbf828643bc864915b72738eca43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a327a23bcda43f5169ad8ee36c0df2907122929cb23ea65dd149410fd27eb32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83313 Malicious code in arif-rawon2-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892535a376e6dce103d8c40ff20b6b783e4234848dee09e177c7f44ada8495a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75076 Malicious code in qori-gembus90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba617fc22bd0aefffcb4665bc56d09908b4505ae0d42058913d1637a054509d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73377 Malicious code in hendra-ketan86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86013d99f78e810e66ebfebd334233f462f5b61ca7ef01678734aaaca9383ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-coral-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb67e71fd55f10db222c1ab07efb14b6b78a9f92d11181ab3a612bb3f98123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...