MAL-2025-148354 Malicious code in subscription-delphinus-grunt-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7dd9799d731cbf6da4d1a81e6520f57583f73291843b357414d2a63c31c3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146291 Malicious code in pm2-algol-flare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d16774e2cee4ea961f6c348bf4e92a499bdf16408452f147c123b2cd2506eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-buburayam11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6267ecdac4e952c2f570cbbfede3ccc9f66351abdd6616c133e3ac8e911a1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134576 Malicious code in jaja-taiwan70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790986c39d63564304fbc91bd635febc63e462445ca243962db671a7894d167d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-mangga31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6504688725d519a6ea30603d7d28a6ee021fc4315d0a3059451842e5c1194730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e01a43418137171089e026254d3eba8b9626886f5539af8caf726c78c19597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-rujak26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea781ab97ef14d1e5ba5f74a4e3b13ccb881dc5ee219fd15f3ed0ecf6ce271c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-nasiuduk34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1748eb2310341e975aacce3341a51ef9288b8fb9bc3cc2482f3999d961822fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125492 Malicious code in citra-mangga63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ff5c1d254741bb8d80068a33c76f582fbfd208b19753f56b77b032fded5d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120046 Malicious code in filthy_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965f8bb999bac2653a213d61ab9a345e447fcd85506182490df923a7c4530bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118865 Malicious code in bayu-gepuk44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade9078b4e2ad6fb59e16f0bcee735800251911ad5dc17ef3a11c321b8bec64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba3d8ac5a8423fc112a355741b55d0057db6e4d93a165010209e1296fef5abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110903 Malicious code in wide_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb1a47a8d7723cff400f04eeb9a178f988809f025273695a490cf6011ff904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_snail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab30b459d514e0b163757b2cab6d4848cdb42346ee5db3402da05f520049f25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101581 Malicious code in diplomatic_skink_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9aed083696157fe756de976295b47618a9b4d02a136f0729b186d37b888e9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59d21725e4a8fbefc05d9744a2826534385696773edd510f049835e42e6adc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110531 Malicious code in vina-kacang7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb829e5a5375c2e0627892ad1e883eed7451cfe0d7f62cd32d62067c4b987bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106579 Malicious code in ogi-mangga89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c821217f4697f7547f5f0560bc7cd0f208da33ffac109b7f466428194f809d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0886ea924a30656eb7f7b403882baa0a6774151616357c14164c4ef25aa0dad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96320 Malicious code in resonant_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca5f82f263ef5fefa17b001a80a8210fb237aa757956400202e6e846fac6b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...