MAL-2025-173179 Malicious code in buis-manuidais-btyad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97fcbfbe6452703e5f03a86aaa60dc6a82eabfbfb1f8e7fc23d21d0907708f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174965 Malicious code in ira-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46badb5c7afe8638f44e213f5e3ea952d80f2aae22de45834fb04b6e2b46c7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-2za1-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb99e1d2b90317b17b8e749aece6c423dc16d5735ed5b52d02c0ab5ef63db09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/idkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c81b159af4b331d9163ba0da21df411bf2c63f73282bace1c47429121bcb997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170537 Malicious code in wulan-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f26e1b87748da6dd1c8712558634925d6ab7c6f5e64cc41bb6ff3a8dc67ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-schema-blaze-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13557f302c015eef445b04257dbb25a80d80434549869866fa18e85a650292c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05353d143505450683f24e1f09df715979b87ca9006ac2ef755f702a4897228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca24cdb265edfd3398352ce0e10e6a60b29d7b8d1e4e7d880b14555a298a5b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lengko31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e48c77cafbe39c35822525947c1f0aa652265084cab8e079cc3148f962c4039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108497 Malicious code in secure_urial-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60ffeb1d302b48946ac955b03baa103793864614d9462eeba6ad572e7c3b3a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrong_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c58ecc3675b60d8265e6283d8849c336890b6d26bcdad41a266483011acefd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92960 Malicious code in zul-donat96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2510204fd73dd9b3368933ecef81e570c2e660beba28655e5e7ceb0814218319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-takokak32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4920625a43720343b75f5c6f1ebf2fbcf0494cee71d2eee4041c98aa710cdf85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lengko95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6481282a019663a32242e6a62d6a5f6d0704270b34a7693eb111815f23c574dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-klentik80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8752ab3749d40e7b18d02a8d07d79e719a4c95b9ffee0d72f20ccf13c751d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...