MAL-2025-189691 Malicious code in string-beta-benchmark-scale-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3882c058c785bd049ed13423d9d06d22f92666c8d8425b6b99e0150daa0b099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187177 Malicious code in global-cassini-hexo-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8261faea100870ddc8b1d2bc37fc01e95b83d8331ba91092d10e31091009d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185929 Malicious code in build-hapi-registry-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d83f597fe639d7acbcf9e97540b25f2a624333b18013c7061e016e06fa331d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-boniv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc2e6537efcb372df433c82b15487e0f848ba008378fdf03383a21fd0af32bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuamicfuifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c5e2d33b4c137b33e454eddf216fcfba37d5f4e616eb0cc0df7c6ac4cfa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179853 Malicious code in lookingan-jaja74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b9f542eeb2d6ffa61e98be345e99e50d8612edd65151e6815ad071ac646dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175932 Malicious code in mahiyaa-sutayu-gano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade9f6d550ab1ba12f9d9fe7dc2cc7acebdd6deac68f85f326ce08aa6070640b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178420 Malicious code in sahnim-sati-fadago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db4facb6535f28a772672811c05df256f84881b83a8aea27a15e0266ddd857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176275 Malicious code in namada-kang0-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a1bff19b43725f02ff23e86f5677187a78311b6b4cb74d3cd447d6fc26fc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172208 Malicious code in augis-pod9r-guliad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3285d91572eceedd4642842f5e34ddb6eb24dc503f2cee43dc5dbd9f3ad2e74c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charusharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687a4317eaca8c197b4f6d872d34dae2006972eb34a7e6760749e3ff7cf9a721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deepikabose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657be9a590335936ee764068e1016f6fd18b0d785991977736ab7815510138d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mursai-nudty-ssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27f288af5a14626a84876f61d0a1f9e2c03d78c1918e11fc2756acad11add7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1b6a156b7464f54be33ec2c0626b673f2a8d042f9638e46ffbb1380e6aff86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af51ce55571093383fdfd4fafd75c12cecb03c33b9cc550b734f33baa853448e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155126 Malicious code in fitra-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4229845ed27d18cdb273f4952462663cceeae86ce93393c7170d5a00435141d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e704de676a1487b0e2ffcb55d5555d76486b29eeff8d74d732f631316e3a257b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alasiasaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6b2ca3593afdc675467760668948c1ca4cff1520ed390e34eaf10b81acb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a476297f2249a8a0ee036c245e6567519738d1cf2c4fe1ca7a5098f5572f409c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c0011be7f6c540047107256873e4c223e7163761cdcd7ae00ea368fcde356b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...