MAL-2025-176233 Malicious code in munufafai-sufanufi-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a6efc05e22804f2e32d445e1202866c8d0c2fa6138055acd4c8d082acc99f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056ef0dcd8c4ed54870eea248d0e0027d34d3f28892344edbfc8cb308d24575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148354 Malicious code in subscription-delphinus-grunt-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7dd9799d731cbf6da4d1a81e6520f57583f73291843b357414d2a63c31c3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146291 Malicious code in pm2-algol-flare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d16774e2cee4ea961f6c348bf4e92a499bdf16408452f147c123b2cd2506eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e01a43418137171089e026254d3eba8b9626886f5539af8caf726c78c19597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-mangga31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6504688725d519a6ea30603d7d28a6ee021fc4315d0a3059451842e5c1194730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134576 Malicious code in jaja-taiwan70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790986c39d63564304fbc91bd635febc63e462445ca243962db671a7894d167d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-rujak26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea781ab97ef14d1e5ba5f74a4e3b13ccb881dc5ee219fd15f3ed0ecf6ce271c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-nasiuduk34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1748eb2310341e975aacce3341a51ef9288b8fb9bc3cc2482f3999d961822fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125492 Malicious code in citra-mangga63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ff5c1d254741bb8d80068a33c76f582fbfd208b19753f56b77b032fded5d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118865 Malicious code in bayu-gepuk44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade9078b4e2ad6fb59e16f0bcee735800251911ad5dc17ef3a11c321b8bec64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba3d8ac5a8423fc112a355741b55d0057db6e4d93a165010209e1296fef5abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_snail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab30b459d514e0b163757b2cab6d4848cdb42346ee5db3402da05f520049f25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110903 Malicious code in wide_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb1a47a8d7723cff400f04eeb9a178f988809f025273695a490cf6011ff904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59d21725e4a8fbefc05d9744a2826534385696773edd510f049835e42e6adc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110531 Malicious code in vina-kacang7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb829e5a5375c2e0627892ad1e883eed7451cfe0d7f62cd32d62067c4b987bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0886ea924a30656eb7f7b403882baa0a6774151616357c14164c4ef25aa0dad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92509 Malicious code in yanti-kue92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55789125ccd2b085df77ac2d564bb961cff68616b402525451d237756fe65427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-rujak6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dba13e7b2a7d514e7474b7cba9da1c74748e7912f25c2c1128fa18142fab76e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back-lavender-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ca2df1d61c834758a40800aac04a158c356cdea14d763bbcb25d8205d531b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...