MAL-2025-189691 Malicious code in string-beta-benchmark-scale-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3882c058c785bd049ed13423d9d06d22f92666c8d8425b6b99e0150daa0b099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185929 Malicious code in build-hapi-registry-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d83f597fe639d7acbcf9e97540b25f2a624333b18013c7061e016e06fa331d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187177 Malicious code in global-cassini-hexo-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8261faea100870ddc8b1d2bc37fc01e95b83d8331ba91092d10e31091009d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-boniv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc2e6537efcb372df433c82b15487e0f848ba008378fdf03383a21fd0af32bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuamicfuifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c5e2d33b4c137b33e454eddf216fcfba37d5f4e616eb0cc0df7c6ac4cfa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179853 Malicious code in lookingan-jaja74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b9f542eeb2d6ffa61e98be345e99e50d8612edd65151e6815ad071ac646dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178420 Malicious code in sahnim-sati-fadago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db4facb6535f28a772672811c05df256f84881b83a8aea27a15e0266ddd857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175932 Malicious code in mahiyaa-sutayu-gano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade9f6d550ab1ba12f9d9fe7dc2cc7acebdd6deac68f85f326ce08aa6070640b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176275 Malicious code in namada-kang0-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a1bff19b43725f02ff23e86f5677187a78311b6b4cb74d3cd447d6fc26fc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172208 Malicious code in augis-pod9r-guliad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3285d91572eceedd4642842f5e34ddb6eb24dc503f2cee43dc5dbd9f3ad2e74c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deepikabose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657be9a590335936ee764068e1016f6fd18b0d785991977736ab7815510138d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charusharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687a4317eaca8c197b4f6d872d34dae2006972eb34a7e6760749e3ff7cf9a721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc988ffe28f54c46d317aa28d6a2d42abdca4d34fbd5aafc5bfa06fda0242e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatira-gootda-ayah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab28cda129c5c531dbdd688814178da4edb0b5865e15177d4d7d5c58bac8beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911b89ee2f5174ea0c7ee3e29ea31f88e3b3eac85c013948ae106d64ff67e668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mursai-nudty-ssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27f288af5a14626a84876f61d0a1f9e2c03d78c1918e11fc2756acad11add7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/eras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e7934042ae646eb94acaa50af16823dbe3a50cfec8c7dc4fc28eb1dfcc9e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168380 Malicious code in tealove-naiman41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7fc92bf4b9a74fc03d5020e36749460595b50b49993fb9aac67fb172fefacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fagaius-fofayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86834efd47354b0566733449433795d18530c0ce7c52cac604bbf8cd1a689657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alasiasaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6b2ca3593afdc675467760668948c1ca4cff1520ed390e34eaf10b81acb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...