MAL-2025-189058 Malicious code in radiant-on-oscillation-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ca9d06180b7ce0f8167aa6796479c6ce559c18461c3ecc78a266ab88af199d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-ethology-biomimicry-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec1a6bd4839590111dd4aee2301174b7baaaf80bc633899c529eda7de74071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yasirakram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88abb3a0688707c4facad07d53f8e3eea919ba37720472ac2d2cf9be92426f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163938 Malicious code in pajero-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84708f8be4dec3cd40bb7dd7e07272e226ed8e2f3ed193b7f0f7bc9253b21b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-auioaial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78a1096680d8a536dc5021b61cb1c3eb3b460ea7de669afeb4ec3337ce8e242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160227 Malicious code in matane-ras-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6469caa7cc84a7b6766dcdea2391fa467eeadfc0ab4585483ac1d7e5ca91c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150491 Malicious code in @miptaa02/aisai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6737cab70acc08bf0709989819532f14add8dae735de71577ffc40112918297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141609 Malicious code in despina-standard-sagitta-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8b128c16f6b38c7b05d3ab353887054659ab8b044b6ec98883887ecdf90940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-corvus-bunyan-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5e35c4ae9f8c181512f92e13b544405cdeba2a3e82a7feec814e7daa456142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ikan86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cf99f195eb0ddc1a9cc1bcfa34f11268aae01d87a89cd8103beba985b662fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133926 Malicious code in hadi-bubur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c0b938be04cee406d8b26ffeb0e7b40eb753766289ba62d7f6726c9e07f69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136953 Malicious code in sinta-martabak33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96cf810c8281c4c79e70c0ef095be0f2ddd476968648a9cbacf3a671c4b3a050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-brongkos8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4ddd195995b653ae16ea89835eada6cf340c1851b884d2b565e84caee13d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stupid_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441e22a367801be505cb4834d4ab90ebef643976033b79a97d955f65eaec6fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-lupis30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f182af2c67ee1ceede94342252105560e78dd5bcd5f1df0e76aab29944036c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122955 Malicious code in rifqi-sego16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca9ad0e11c7f5bca8951a2328d087eae9c1a8eb42c183a7c1090cd20fed40b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122530 Malicious code in practical_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6135287ce4d5b620625dd783646ad141f437960f5549e572705f0b245d077222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kupang64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94f28d81e1f13e76203789ee0026c162cd761f7b45f4fb206743b6dc7ece8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9331093b2713eae05ae0615358b2999494ff651ea23b2f01aebdf4ce121b5e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110190 Malicious code in unusual_whippet-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2a7f21d64d41d819a3e90eb918eeb4b1a462bea8e34a3763f4974e25d372fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...