MAL-2025-178462 Malicious code in sahu-satsmug-fafagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36d82f855e7990a1a11ab32e13aa2786242f25be1d2e6bf5678534c6acb8b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136681 Malicious code in rigid_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb97c29007df6b0b10ec44a454c4a11ff6ad4a986ebaa403db2cee9f11d765e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1961bff779689d6bb70828bd6980c9a55ac67e0808ea81af9878ef80593bb585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-nasisayur47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa2b10db6ed2722f5c38d860a2af0525b35f80fbb2e1ab6d6c637eaccae445c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115836 Malicious code in moaning_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26cd27ee9d49d3fc1375b6a13bef793089592a4643e0fbebb5f0770d1dd7505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-rendang28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0975b92763b44a4d234d28aca2e7af6f6967fc93f8ab7a6193ff147c6cadf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-dradag33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8dfa4f951ae76de0e2684fbcc1d45e6a4b0c2fc4800dbf747099a385040cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-buburayam23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67433f04371b3d25c28f83cd0c9156a966d3cc348e122734a947dc43dc4423b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-nasisayur79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f242f1649d43956f31afaec4ae8ce7527114fff9b70d40acf0574aa2285cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719defa1578222bbb39d24c388fe502570632551b4641f59cdbabe984824a74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...