MAL-2025-184948 Malicious code in sonic-kas-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12ce88c0c9964c4f59e74053f3602f9a409deaaae289b1b9a8252b760d67137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-aifor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 735aea5534218ec7a9e19f16a2022203983c2152aa8f8f17bd3ede310e043b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c7098e08baad0fa3f18f2fa7f10ea168a521c4b01334dc6d0619d7ba8cd317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158385 Malicious code in lookingan-nakomi27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ecc530bd99e5d1b35d79eb10ea081341873afdbceb5178ea94dd6525384af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bubur16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d4bf270dd84a00947e7e7d2032ad1ecca55d222deed69df88febf1ecadaac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29c4bb131cdff5e6bef837002a35c4da51994352b59663cfec6798321c1482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128319 Malicious code in lisa-wajit48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e963bed35c7a0ab7cad5ea40ce05da1d78fb1fd6a600b501b6f86f573672ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-papeda36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6b1c27a94c2d3b384edb524bc0f448d1bb2160dc53d6d0c0735d0264daa4be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112840 Malicious code in bayu-ruwet73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a91acc5ffb136058a2cfcc6b21a1e493e878509a3396cfb814dda01c8e9c99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70435a3b9741bf8e01201eabfd83ca3fa77324acd3925184f156be7a53a2b4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109651 Malicious code in thundering_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fad55de863ef296418f1aff5c438143c457413d654fad98c789fa5567ebdf05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109389 Malicious code in surya-naget81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5ece4c929c4c64fe6afa48ad591a5883e758345337b939a1fedc8faad456f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93818 Malicious code in cooperative_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8391f33a7f11b0040c42dc13d1cb7bebe736abec66541cee495d310079912fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84987 Malicious code in eko-nasisayur73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a67d5068f5c2456e67045467d8d631e3b86fa1695fb0727f044d82f420316e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88985 Malicious code in ocha-kentang69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee017a6bd1eb245781a80a3680945d276aa665313761fb11df863fbe34abd05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84532 Malicious code in dewi-otak-otak55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dfe6d171b6a10ce598ee8da59cd93b2170df984e66c0140179a763331152da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79429 Malicious code in kresna-toge91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42558bc41d749a895808bca3e4895a3e138525e722c0df75efff3a015a7e8df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kolak50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80b65251256716005c0aa3911b9fd67e1674e63a9521794065a9b0d2ab87e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-getuk36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7609e67bc7cd44d0b55897fe13bbadf78f6957375b925ac1c867cab0588454a1 The package vera-getuk36-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in bambang-bakso31-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516a7f68fbcda91e448d44b8ad296105331ea27ed92788ca2e76a0f40458b513 The package bambang-bakso31-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...