MAL-2025-185129 Malicious code in sonic-kulig-tgacedcuadojaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0352f621d3af13b88b0127eeff1aa5ab72c74691ef61cc12a25c8992b1b2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogofiagadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817a4471b709edb797ad6215ff80d614129bed64989d06cfabdc061e7a556cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173769 Malicious code in butry-posiy-iduy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edb3c3fa379408fc03eec5bdf47ac75127fda6d054323e2df0dff39474b294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176067 Malicious code in miftah-miftah21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49a46ea199403d63614d67dccf0aa5101539d3b65bd4c957f12a4f8a7e03f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leadan-manda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a8e2dd89b73ae72e0989d79ee5a4f20d286d0c9e0a1bf27fca17b645d9c0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162478 Malicious code in nokire-asaka1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13dc6540476807f4c66b6b01ff1fa95bd7bc879e0fb4435e8482384dd2397fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152788 Malicious code in arif-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6925b05e45bc15fb715dc8abe7dcdf925a9b6a919490acec7ad7ace0e23243b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-regulus-xenon-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b88c30f23ade6e1415484a7e9c1f68a5da86de1d452c1653f5cba3405c60358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125939 Malicious code in dono-mendoan11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e23c9314f2d3aee69e75c1c093bd1d0f75f16f7779f71ed4f8195cab2626905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kemplang5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0323e9000f13648176027d76ed379c6f5b95e36f64102a9f73e0a4664f56feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better_roundworm-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00436f4ae04b585a3251b45dce629a1ed8c9364d10c4fbc0f96bf371791ef1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f9f8f70567143b5b60e52e70331a45b8bc1e20e531d6658693e5b941c57df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-tahu19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3894ae0a36ec87b977ec44eefedab3bf21c723bf5e4eb7d56f298dd1b2c51e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lumpur54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bce97329b3e1eb9c8167c458987ec104f1867776d64e615a7719603f06bb5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-pecel34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf89191f3e17541a4c0d74fbec6b4425577a0d6b10ed0d42c9b5b86de49c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c80e39aae5465b5baa2b2004a6c288e9a61698814cfe92bbdcd705373b58ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-gulai99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc5175bba5670c86424b044f2304abd99fb85ce091d665d372d991f07857f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86041 Malicious code in gita-saguer4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3606a3954749fcfc656574c9636da64aba18d68770b0abfc0642e57b8c2c440f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89720 Malicious code in putri-miebogor96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db6a9d111920a806f9fe16f778cb9d53e048eae54dbc960261a8d23cd73cd32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86709 Malicious code in indah-wajit82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a694510645096540472f8446b7adc037f743af7efece7cdcf56809805b8a9ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...