MAL-2025-189830 Malicious code in taurus-mutation-izar-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c256602c1f7c8b93be5ed695597c57a40839d4299f5b8b8cbe4a4f17d74ed56c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinuhsukosuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11e92b0f03d4dcc082f434397fc50f6d329cfdec67e769e7a173bc7e3722a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179957 Malicious code in lookingan-nanakila33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadeb500d903fef7e1b17c239f28aed63b617b0cfcc9172936e4d50fe2083066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176282 Malicious code in namada-kangasa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61a311cee20b2e147cd7b4332c4891ace890aa63cc81516a9dad4ca9cd4da35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e121b35a787253d269f5ceffaa5dc7482bbf4a3e685b5efe960c8e60fae67f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151169 Malicious code in aben-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2c4d0ff2d8d54ef3f17226de773ebf9479f9e12f8f54956db7a5856e6f1d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164579 Malicious code in putri-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22c443ddd6ed6440ac548ff86fb08571424413aa7d37a080003d5a0fa78c35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luvakalumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edefb2ceb0ba1ac737340627fb7e9724ed8f226e3cc196bd27ff8216907e9241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152151 Malicious code in akabia-aliguafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b089a2a32017d484d4355e9fc4b527a8020f1f4fdbc4fb4ecba138c61851f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137111 Malicious code in sunny_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7542661909e5b49f3dc3678c302963275e5bf6cea0f3ae56af6214f56b383f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126744 Malicious code in gilang-donat76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258bcee779f96be1eafb096b2d60e259b2065b789833d982394e11affb666a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120485 Malicious code in hadianto-sego36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb0b0535a97971cdcf06f0ec60755b28f38907694ca6f9320f6a1bcace0d47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115132 Malicious code in joyous_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd966dfc865bb137e7bf714aff967531548d4292a981565a0be3b2919428901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-tomat49-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1f706f4985051c5cfdf5cb66acb19b8b21687fbae1bcddb2447535d80e19ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lapis21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1920839a17c4e9db89ed51d6640ed3949492d781205699feb3debb38b7132885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weston-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250d308f574c7477f8147006b825f802f5867c4eb9a4894e07207a98803f1fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79834 Malicious code in mahesa-kupat46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bfa6acc70bcf4daa507caee176e9555681c1309617082f60817f0870140432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-bika82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78cd33c8fe716401d225f50cd71b8be3b0950960a6f86b5f459803adb234594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60722 Malicious code in judicial_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa65de3e33c959c324bbdd39c9552bee433568df058fc104e95848110ad17df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...