MAL-2025-189579 Malicious code in socketio-polaris-restart-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80f723fb0c38fbfaf0efdc1c70d08acd508343dbd594e403fca9751fb9b1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180988 Malicious code in teate-thy-sonic-tunej (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f410e961b54fbef72c7a43497c96c79fdf7f8b6f5f979e21142ac9e6ac98ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180742 Malicious code in teate-thy-sonic-nilop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3676305a6c31419f5245d28f63c2d1ce238d6acdee0491069b81f9c242f4f069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luki-kntuoolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97c2e52c154b02d979226655aa50140dd4894689b739593c38739764e1fe127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154858 Malicious code in fadila-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7788e5c796843b69379495ae7cd2d4e0c9594a61434045c326ecda063e11310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159797 Malicious code in mansila-tfla-magaziigboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75a184ca91a0f1b4a793c77387542e882beefaf7939b831c410e02e9718bfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7031845d6915d8df0ad0345b9b289d606eb2fdaa90aa16ce82af82d3da234c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-regulus-xanthus-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623f738fdc461b8c38a39da3044e89eb5ded72f45c346f84c268af6fef85d9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149297 Malicious code in wasat-procyon-semantic-ui-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c618454ff76cff11e80437fb251c750fcb3143a8744cbf519a2690c43e433fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139376 Malicious code in andromeda-dagda-mui-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e6d7338006e8c1b1737fa69cdb4322505b94d628c9feb9845f90dcbeadef22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-serimuka89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d20ac87f6a52631c8a71fa8e65de5a56f227d89f7fba108c7a2e23de5c689b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-gandul38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5e1010c1a66bff0567b798c7dbfc9587b5ca3a0578e52f99f47b0fb6e43edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127440 Malicious code in interesting_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d6fb53af959f8eb8112c494b5d1f477df99a44b01e53d719f9c95187a5c4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-brengkes58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1e77236780396c8e9cb482e17c11e616cb0962c61101c0c4a9cbb4697ab165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119690 Malicious code in eko-kue21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d6b8541993fdd3f32246eeb73165b9400700e6c6ea6e0be23aad5ff4195b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab32175d98ea774352afc287178d0f285dcb02580cd701959ebab2cdc0b84b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115825 Malicious code in minor_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74363cf3c981f2874f35706f8d4039b114a225dbc2f14104e58b8d3aa706d3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114781 Malicious code in indah-sambel50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960c2448c177d4e0ef17bff7f0b0904e3557964be6816e1122792fc790668d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114416 Malicious code in hadi-kue15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6884697d336c57e465170e26d7fa80ef812ad70ebdb3e5e8765a256ec925dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103846 Malicious code in hungry_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960ba22977cf2dc72b96399a3aa7c3dc0acd5884702ac8818ce16ea873182d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...