MAL-2025-183815 Malicious code in masolv-avlo-cobsababasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db975995279fe0bbf422c260e7fd7d018fc0a0a29c20d946c20a6a1f26d9c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imanumabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668e6cc1443901facbd425e92f42acb100785af113222373f5b53e9567971ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179311 Malicious code in unimna-safafi-naiagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb636fbeb755448fe28aff304bda45f8fe3043307582bc14753ccb0f1e61d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-asdf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e5a4755d374a0f996b159849e7bd714851327bd914bf35ddd0420eb3cba1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d70b7de1b1e6cc814493ca2dda62501d4ca55e08c74e401242e7f21da28e210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165576 Malicious code in saku-ai-ups012ugiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7f5141c78f3317b441088820e84f281a09838ede8fd9d848306bea96e1fa2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168561 Malicious code in tealove-nokire32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03648c45cca73b466331be9fedf58c3cf77f65eb57fd31b414c83b092e57342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moile-aromai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd661a89d020a1e93adcc66d138b456f7dba0e47bcfb90dbfa3feb71b483d9db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140879 Malicious code in comet-lacerta-config-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889402c35bba670d63a6ad381b3eddb7635381d2d40ca3e04ff69bdc22e701a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136575 Malicious code in riana-gembus74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07f8e5f5678b757f4d3ba47bc7df942e5ba9cb903728c793f1f8cdcc27ecc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-jus85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab7a7a73368b12d90ccd3d6d34cf075065ed6ac0c580b2069ccf8ad30086b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-donat19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b719985ecbb29eff5bc5cfddf314c6a9c412bac0c0153243382b384da53f30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lutis57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf729c4d90f64cda1f00a86c2910d377f27cd8802744808f3d6042f327ed1f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116234 Malicious code in okta-lepet60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e1cc9ca65eea13f1a8e7813a1ef3bb1fc7ed0bfb355cb69cb0df4a29f0a611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114513 Malicious code in hanafi-brengkes24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d51dcfd753bbb4fdacec6d508edb8ed7e013e5f366d6123c09a80f53d111e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitts-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee782a82903d409c2efbf140fa063150851ee8479637d49e79aa2de94667c2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106965 Malicious code in patria-kue52-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb858ef1c57fd718676eaf46ef42f9f8ecb8f3dbc49d3e5345054f1e9270bd6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94495 Malicious code in few_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df12010d8d849dfa2d1529fe9c7bec5f9ac681826a81c0e5cfaa4560eb546d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-miemee63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587dd1f60102866ebba769a16e089db0bba19d6168b51d651860484ad5c15a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent-pink-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ab26be9add52543d95433400d44891528ea8f428884ac26e8eec4e7360ab75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...