MAL-2025-186144 Malicious code in child-process-eridanus-cypress-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2052a0a86d5712791f1bcaf79b700a6a9e92e85eece452bd875120b46a08accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimamfaatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1220a8a7c027ad0cd4c14a1b330e82a51c106fd14f7a69964bd22c8839e72326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183272 Malicious code in kisut-diug-damifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4301501dff2d7b2c475494d391970a0a11802f200ac2462b371cd44e056ff18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec633fcba298f059173b5c533b501f9c47039dc4f1ab2c193ef3e4e5f746f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174630 Malicious code in hitachi-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c585913fcbbd4a54f657f18f07b029918702d1635dbf0da2d11120affe191b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fia-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214b7b0ec8e9490fe2c8770254462f72c618e17a0af48b20edeb92c5bc92e0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171266 Malicious code in ghulamabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8413768e7130540a95efb1c49a78e38d2b35717c58f9ac83a477388eedd1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1afb4e42e47f9a8a61e29e3535e3182be821b384169ec0b474b761b2873f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149958 Malicious code in @mipta1/asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6baafae6103b4d52636c20e9056676fa2b0051f41794b09ed1793be325776a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153326 Malicious code in avminh-afai-faauofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20497e2f49a06e703b2180808504cc5df889af55c877f4e373016b29b0ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157049 Malicious code in jelek-rasis-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf580b0d87536a4236be19db2b41e3e978c45a912e42be45ec97eb8cee703944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioaluan-ofai-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419ef5432e6c5d27b50c6fbf40d4dda2a6de429455de664453fc07626580c71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166400 Malicious code in sunderl-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcdcb8a49241cb672dcd231303c106f1d1b3c0fdd0aa07c4387053e70603c56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luiu-knni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1945bad686660775c4eb95b5bb5550065f22e1ca071cc23a3a184f477b3e77f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160225 Malicious code in matane-r-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b994492f8518e2a2663fa165fb6e1f34640c086a6dd06bccb7f6237f53ba0b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c4370d6e67d863d5f244f34cadba40b5ebd4186f563e33ffbad73fdf217534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c252c09b1b7184b871c5d1e10921422c31764ccc36436f88172454b3679c32f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68482d81da8b27b87980c467fc18173de06c50b71b2d41ebf57c689fcc702e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-saguer25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628773827b66e14ae8b061a2e8b2150f6580cd302733b3b0daa7efb04d0c170d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b4066d842371678c1c4455b78bae84beeb0ebd09d63807f686819687db8bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...