MAL-2025-179270 Malicious code in try-utudru-uyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc29e7e797b410307fcb9d7b24622e7c5dd74662c23754d5740d4a2fd80ae0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc635cb08a5075d60db428d10d515fcc4f921d094635a833884e0d1719c354b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166656 Malicious code in tadasdhi-dfds-nsama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5286cf2f1befc48cbadaa88adc5603f0220652865b633e42aed9a28a9bc2f5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzi-ilaoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a437062ba6c5c33fdf9309f659fd72dab7ebe897618dcf5fabd6ffe10261820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pjsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ea602958473dda077c635ffea20ccee84352755f8ee0c914abe99d64e3c413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775b65e648798ef08cd8a3f044b3f2fb4221c7a145330321166b0f18734e9b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-algol-react-bootstrap-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ed5e4fad8e5d6989b6c0c9be3075804f8386ca224135fed892411aa1acbd39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-asinan31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d49a61c126edebbc6f068f9266036673d8f6a9f2492593ce811622ff0b653a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136721 Malicious code in rina-rangginang73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e04be967a0fad125acce01ad1007bbe251602384692027ef72eb4814590d49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129686 Malicious code in rare_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd549cb0ec638f1f3d4d55a70bf4323240ae73e65788ccfa27218edfb57cf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120519 Malicious code in hanafi-kue45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74439d977b202b3e16a5318aac51bcc044808a6be9557004cf49ffca94cc1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123133 Malicious code in sari-sego62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87ff3ec40bbc5bf655734209bbf86d1fa1e98e7025e1b5bd0b7f41ed9331a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97581 Malicious code in andi-pisang49-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35018947da924f3976a22021b13ba79dfcb7bfeed79ed47e066cac5749f782e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1e348b3eb0e83d541267398b8a20536e3c78bec0b424f47d5656959d395ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84207 Malicious code in commercial_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709fd8afef2270b22d986883d00711a6f587c6307620cdc9183b1a6815fe801b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90192 Malicious code in rina-ongol-ongol72-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22dd030ad53dfe1b01afabc189f97288709c725caabff95901a5ed93d2d063fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-lontong66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3832eb9b5dcaae465d3bcb7db9b88ad47d32eb5d27ed96f73a13025edacfb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63582 Malicious code in iwan-jamblang19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c11f1fd41392d7ff6694e87246c17f2101b85c6061f0336613346e60c625c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61590 Malicious code in visible_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb7383c6882421c947f480b5398d0c4f89e2c14755c7cf4419488f8bda6068a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...