MAL-2025-183278 Malicious code in kisut-diug-danugamicffoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d47cdd2474e71ab3f21729fab333fb2161e774dc9e3b27786de0fcad9175b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabidant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbd43e4d073e6afc6001e2d4cac6000c316e3b7c5ad3d5b4c41481dd13a9e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140446 Malicious code in carpo-jest-celeste-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5302a6da915ba69b2ef4fa60cdd9d629cec52485a615e36d82215554a1e685f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang3-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd929c100d91a6a2f47dd17c45e60220509e0a41f9db40a21f73083bf9f9d423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121460 Malicious code in lina-buburayam4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4ab5fb65dcf8de9f5bf845d30678a0f9c00d7c0a008f54f6ed76a179e71878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121777 Malicious code in mature_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57614665978fde221e49ad83a96dbcaada9be28a1d15fb899d46acb4375bcd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-gorengan6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28ecca8aabb319a1fb42ebc42e888a7e5933ab201ac3e5a22c289008cd399d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104155 Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-lodeh26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6d1670e07c735444e62c040561a2ba42c04d9bad2b55fd1db8470b2b3399d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55987 Malicious code in eka-mendoan28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d81803ecc2478a66ed0498348eb6fee61635cdc3533e110944ffcf3ae14aaad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54556 Malicious code in riana-kue36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b281243c3a087228e9efb9ecee3d0470751fde50e5ea4433ea7e3173b84786a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...