MAL-2025-186293 Malicious code in container-tree-signal-notify-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71d5038f64d6e372dc504ee04667b316a274a372b8dddb45c2cd8c93fd779d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b91aacfe7751c6c6ef37b2b8b3e90dac0c4128fbbb161ca9211271a7088f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4763a925e20510b25e35310a8f9ff3b33faa69187b219a2776ca4470f76c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-ifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd974d9e49ea498b87cfc41f393982097160e9a8a3a38c4df42241a8f2733e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141713 Malicious code in dotenv-parse-variables-convict-fusion-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca6eb8631db89303e16034582660ccd74eeb93a6ba715b0bc50d4579f7ee47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-prompts-equinox-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705e7db14495cadbb89c51f3f8daee6b48ff5007a23ac673f16535a49b7849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-nasi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc26c781b00a6f14813066e8847887791e3ab9c6b1048aa8da9b919431be49e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ubi3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7834c959ff06c81ec5781afacc20e9e017b86074d7ca8e194a0e310b5b7b3402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4864efce98e9e31c52b3b2b5ed59a1ddb05fc6ef97fd3c121bc230aa9a228691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124110 Malicious code in vina-nasi37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5f6bf81178dd8f5da5701931d11fc6bfc31fe314df443da4f247c9c91d8b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116349 Malicious code in patria-bakso27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7475451a1b135c53573b7dba8b839262e20ae0940f77cbbabb27058e5e3a1d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112371 Malicious code in supporting_goldfish_beige-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925cdc5ff98291cf8bf805d412bae8bb2efeea163ba24ebc76a72a6133ad5ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675d82e7fc807e8b2e83b34f25c0d1ce4bd83fe256e28a5e1ae2911fea9f0841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-lodeh85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c318f7a6cc5be864883f85d451978d37746f2bc231bf983b660f34e2f0e28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90839 Malicious code in surya-ketan2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efde74f03bbbca818f8f5b7329f2237f9b3ffe98c73fda352c5979014409d0d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kembang12-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b61dc70db7257b6f02654f3df9b000479063f203b1eaeed800a64b0d7cd7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79865 Malicious code in maman-buburayam37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62f41245cd1d2ab805395255e5e174403bcc66115a97f77617095325e74b2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80411 Malicious code in ogi-asinan40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b364912d4ae9d83f718fb1b89f028743ea68cb0945aff0b7fe38a2a1e55d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kemplang25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f6fd0d26bd0a8501fb881600d8a4e745a5848434bc39ba584c926d50d49ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-ruwet21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7df65887837ad44ff289263386c43e08fd7f38b707e76f49791fe28cb71c722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...