MAL-2025-180714 Malicious code in teate-thy-sonic-mudu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee4f5952c29c48dcbed4495eb50b203ab8f80f6bbc136732f47f73c55d12d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170464 Malicious code in verify-tactiva-mechanica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3e40176fbeef59f5b4bf53d6b6db3b14a482438e955a41adafde62c3bfebed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162349 Malicious code in nokire-arhani37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cc490afe9aa0bae275c1db07317d2491fc5c699e671fd2297fac1db4acd45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148544 Malicious code in terser-webpack-plugin-child-process-bunyan-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4839b0d11bd49cc80454d892a0010eb13cfbad005fb5bf93717d6f499ff2dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-jovian-galaxy-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67727dee8263d1af9289ae9af3406434cdc8e3f776477f2db173ff1b55c525d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-chai-impulse-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7201b865b3e0a28841237385e3de63e60d0e7aa6da5ee7b88ec0f34a2bed21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136818 Malicious code in sari-bakwan37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc26f043bda175d17a9cb29bc249e1ff28cfc5de4cb3f976d846af9e3c4a756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120150 Malicious code in functional_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02206708399366233d73316dbb0b9b5f816cc1cc4ae05ad75139f618ba42519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118773 Malicious code in arif-mieaceh12-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08b482741accd202cc1a2a38a98c6ac21808f811e1b1d455d79143b20dc673a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-keraktelor26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab361095470362a150f3ccf65b5da10016821a762d862d25aad5c112a421776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97310 Malicious code in vulnerable_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfb5b326b4b9e3acfb9c377f9ed915b4d4e06888209565bfe695847dae64b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90464 Malicious code in serious_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f925b8f7edc2a93052283cb26a475abbc591d62eab5d67f591bd35032e427448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84366 Malicious code in dewanto-bakwan72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbbedf334abfd861ed52a11b48f2cdf822f73b75b99e0b9dd4581e34feae434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69127 Malicious code in lexical-olive-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba4eff905b09c595547908db1774aab86401165ba4226ef6e104039bc7b079d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63750 Malicious code in joni-gorengan69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcd4ab616d82e827c2e5c7c4114bd7a88d5d87126787f914b53075f3d8deb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e126c4247aa88b035eec1879091b5749f80d760d0eb330981ff8b05d88dd59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...