MAL-2025-173179 Malicious code in buis-manuidais-btyad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97fcbfbe6452703e5f03a86aaa60dc6a82eabfbfb1f8e7fc23d21d0907708f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174965 Malicious code in ira-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46badb5c7afe8638f44e213f5e3ea952d80f2aae22de45834fb04b6e2b46c7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154760 Malicious code in ertacssau-tery-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623237c9008e038b2dc882a140cf92a3b2e587364ddeb07d68ee7a354deacbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170537 Malicious code in wulan-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f26e1b87748da6dd1c8712558634925d6ab7c6f5e64cc41bb6ff3a8dc67ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-2za1-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb99e1d2b90317b17b8e749aece6c423dc16d5735ed5b52d02c0ab5ef63db09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/idkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c81b159af4b331d9163ba0da21df411bf2c63f73282bace1c47429121bcb997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-schema-blaze-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13557f302c015eef445b04257dbb25a80d80434549869866fa18e85a650292c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146169 Malicious code in phoebe-pavo-grus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a2a606b8dcb49d586718615dca3a20876645f3d5a3d5f21e04dd421df311d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05353d143505450683f24e1f09df715979b87ca9006ac2ef755f702a4897228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca24cdb265edfd3398352ce0e10e6a60b29d7b8d1e4e7d880b14555a298a5b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lengko31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e48c77cafbe39c35822525947c1f0aa652265084cab8e079cc3148f962c4039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108497 Malicious code in secure_urial-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60ffeb1d302b48946ac955b03baa103793864614d9462eeba6ad572e7c3b3a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrong_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c58ecc3675b60d8265e6283d8849c336890b6d26bcdad41a266483011acefd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gorengan25-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eacd230e5585d346dd0cc5f610cdfc4b59f86c5d90916881b9cb847e7ed8583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crucial_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46736a3432ccb5d741534934fe08faad60623ca9e9bd830279dcb57f4fbda481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82844 Malicious code in accessible_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500f1b32b6c7ae13ae2dae5fd1274a4abe849e11b91c3212f430e58a7cbbd92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92960 Malicious code in zul-donat96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2510204fd73dd9b3368933ecef81e570c2e660beba28655e5e7ceb0814218319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-takokak32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4920625a43720343b75f5c6f1ebf2fbcf0494cee71d2eee4041c98aa710cdf85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-gorengan78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5d6991a4ef3506e467ddd7210fd988de961331b80888a27c9aa0ef63a1a1b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left-fuchsia-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7b30d014a7c2e963db945c363a0b87b7f0b8f25a8231df93a029602bd76734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...