MAL-2025-186710 Malicious code in elektra-xml-grus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8f6f9bbaf6c31fa6c66d4f459eaf167a741ccc0e66e0a22a5941bd34df4e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162639 Malicious code in nokire-kilua49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c3fca196a31989bba25dea374a78296779effb8991a901489214526c180000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a3957cb70afd2b1619c0e3d66311d5db9c3cec69c1371901137561989e4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159781 Malicious code in mansila-tdhfla-mafgsfdgghjhghla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313a4f74e26e481785fa14edfeaaeebdf187683f6fe8bb9be8a5222252a0c5d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139074 Malicious code in thin-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a34044521b8d493446ab2db5511bad2eadf7225dbc6736f3eb20f283246bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135471 Malicious code in maman-rangginang90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208fbb6b01645030eda65f46ca6f0d5482d3f4ad9b457c68a9e9b2f153cbcb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138127 Malicious code in xaver-lutis82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba92e36172a5103a0b0d023297e9091854faaccc4a94dbec50cb07e3a0d11ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125707 Malicious code in dewanto-donat84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2077c6801e7e3658d2b4b189b035f3b667148db99d363ba5ebc44ee0978936b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120758 Malicious code in indah-mieayam60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613c8ac760fea58da160890b32064cfaf3b2385577ab0832facaaaaf28b297af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101671 Malicious code in disturbing_walrus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3278efdb6f851ed9d0f0c0b9d7c5841825eb4906604426a5ffc02e7e4eba8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104028 Malicious code in improved_antlion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4d3e1db2774d7051c2b958c8b4110adc1db3c988f90326903c482bf7918cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44de730e1496fcbcb96b69c8eda3540e52476fc8a0aef993f419f6e5ed42c3bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100896 Malicious code in constitutional_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e9766cc3e88e2f0da2ad72b5eed991566a786816a6960dea62bc00f34ff5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97179 Malicious code in unwilling_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118fb3368854e7a476fc025a7ef122072fbfaa4f3188e1d8ac679d4021c5d9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appropriate_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b730497c522a6bc039409966bc352dc2c12bf2c89fef17918ed72ec6d8efeb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75054 Malicious code in putri-soto47-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af6512e792d0f1581f7d8514b87b6556b84742bbaa407e97f6587041d1cb562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough-amaranth-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc8e26b15f41fc6c4e8de51885d81bb0ed8995816202a678a779e3443b7540f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69035 Malicious code in keen-amber-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263a5461294e3cae4e0fd3c0a166c5e015648e2e3aab184ff6b35dc63abbb7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56817 Malicious code in indah-keripik32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bcd88006fed0ddb97b125ad6fd15d8966adc681308b27a5fb941376b4f8f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...