MAL-2025-171890 Malicious code in solarwatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017cd56f0a51b9c7182f2e8c06dd848816dabf2ee1e5e106fce4ba1e85572866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153724 Malicious code in billa-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d3841773d8725430e0f0b632055b877ea183b134de43feb9b4c12a930097da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148993 Malicious code in update-child-process-xerxes-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e764918f26ac7cc377b1b33c32bd3f56120a8f487b5adf3b2d817e3582cd07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121397 Malicious code in laila-bubursumsum78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6569278c267ae0403fd74f843da5b6c8075470a4f6b928004eb54359a6c6ca18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c4086447bbbabc99eac77033007a7202539006fee4eeb16578428bb3150e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_ermine_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994dca144ea6a3aafc44fe2806618a1ce0f42fbd9e78645a44d67a0de228fb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110408 Malicious code in vera-ragi89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70adf648730871e226166faf25202c851eb2f762688bf31ee5d2f892f4cce94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93408 Malicious code in blushing_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623d05271c4a6e64e63cebfccedabd354cca03528a5247a8d5b821189a7f891d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90437 Malicious code in scattered_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b65ff947395e4810155abc21fb22b546d8eea2efeeee09b0cd3060ddf1c3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92513 Malicious code in yanti-kupat45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b53a42d2657d8e2eb7d1e8a6022ead4a7b6b1e51fc20e2684881624f7a64775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73938 Malicious code in kresna-tumis9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf1e45ca4384efa8d0d4dee130df85d63fddbce4dc8acea2291ddd6c8a3da57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy-gold-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...