MAL-2025-179705 Malicious code in kisut-faig-dikanai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd84ce7273b77bcefc804e137e81422475c699b00997dc1217bc67dbb6322de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f106eba1591289b3e13d226bb88decc061214d569e84abc6fd5a67fc70cb1e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154458 Malicious code in diago-kuli-luui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c94a6475921c6a82fe49028c914a033a2f9f551dcb947a1812843cfac9c1166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141764 Malicious code in dotenv-safe-non-blocking-bellatrix-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f3a0f41e22eeffe8e03617d54458f2fef81c61cb1d871598a3c4f76542fc27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125952 Malicious code in dono-ruwet90-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440bebe9f1f962a20da532ec060f5123a9ec924b90dfcbae76ac14fcdda87a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126213 Malicious code in erick-sambel68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e7e0ce64370967079d6ebbc17514502ed0294d86fa4842275b32f086fb2906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7268dd2f8833cd52b2651c530dd010133cc97cd8ea1341fd085a4db38a2216a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97836 Malicious code in galih-pisang28-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea46f4799c3f191ca9de2ae26b4b6eebe1df46898b5956d898ce53a1913b66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-jus94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76853e404c74645794ca2a1e95555300577eb8d24d4f94f20d3780c06669c4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81040 Malicious code in rifqi-gudeg67-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21bcaf8531a98f44e34683452500801557c391df3ee22a477139acfd6c8466e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82665 Malicious code in zain-getuk97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878cc86feaf47bf115606d2a2b832ffa9caee7ee15288d769afe84505fbb95f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60771 Malicious code in live_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8237bd8a625b636c70abb93240c2c69a3519133e9a3a3e9183243e706131217d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53734 Malicious code in irma-pecel17-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b965338f7b1ea62c237d793d56db94e1489c25dfa03703256388edd4fb6280aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lapis21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176cb5c50e49f7a15119f2f3b76fb7b45dc7252b078148bd231ff9a381a83bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50216 Malicious code in dewi-kue98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0e6295281ec6b87bc50383474c9d131bc1965b7c66a3b5e75ec42d85407620 The package dewi-kue98-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...