MAL-2025-186141 Malicious code in child-process-blitz-spawn-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352192e625655a62b387104ffb60a5f639784d2858a0800691396d8f61c4b31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67c76fc4087adf7f901789c83797ed9ec73edae3769c8f7b3b382162aee9586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174966 Malicious code in ira-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a1316be6e726938b9fbccb2dafbd55a69300a8ce029c4357eceb9c4088dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164994 Malicious code in rival-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c863d8caacb8bff573f4727d4fecfc0b4140b8d4e6a33da7ef005e9adcb3ce48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tijfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912c20338aee77a18dd14425e3175085d6b7f165e510e1939b4c4f6de883bec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162514 Malicious code in nokire-genji27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac168d7434584daf729c667d2d423b469b0a426f4b19ff8bd08d417e9119ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158977 Malicious code in madan-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad27578850311fe8f6eea3c6e10acd73a6f669be17178c63d35e36bb4dd38f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149233 Malicious code in vulcan-express-phenomic-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d9c5814154ab32cb6266dfcc631d0eecf3797aee3527044383bd1999e4c9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127460 Malicious code in irma-kentang13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf5131b065c013aca3f705a66a4249d0458abd721c8f152ea8ff6baa1e67310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121488 Malicious code in lina-mieaceh79-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cf84ca39b8517bcd42e47b3c2a94fcebd3f882bbbf904c83ce17f362ef3ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasicampur98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e37e6e967ac49fca37ae1734fd3615b7afff90fb018d271c4d20f06d7133c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112315 Malicious code in slight_whitefish_crimson-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fc064230745436d22921618279e567de992cf50a8c5672bb296b05d2a77cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111628 Malicious code in zygotic_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c7d6e5dfab5abaff7155c6e9e5014a2290dc4397dbc54eeea252ccb1b6da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107953 Malicious code in respectable_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bece4adc0b44401a4198df6b38e73a5d1a3ed4c7fe887856cc1c0a498682e7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99158 Malicious code in ade-naget21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ac6121f121d069553cfd11878792a98d624c3ac251a947c2a4b00fd08db27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-keripik61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c721c0418dcec0b9fd5b33426484e7bf85bf060da73bfc89dd65b4d7d7b3a1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90455 Malicious code in select_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c7796258c12856bb762c5db0d97a93814f8f7de8156a63902f1325ece0a326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92876 Malicious code in zaki-kue97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47771428e25f6274e8648c437e709a12bcb8a1c6fd77384f1cf82037a30b1d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92366 Malicious code in xaver-kripik12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223384f9d417fc5f52cee71c6de684becc3a0c6deab95ea2512c26db6b7e46df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kentang62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af96eb622f20974f0eff172da83f58655b72526f4356618ebf119c97284e7876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...