MAL-2025-180881 Malicious code in teate-thy-sonic-righab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3887a7c3dba3944b782f00f14963da9129f3469df2e492f44ecb3fa968ce6a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-docusaurus-nodejs-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ac08c543ac3751fb7a781814ae801d51313d038a0df1a8e71a40a06550122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134216 Malicious code in ida-getuk96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e1af48fa3209603624dbdd7c64606dc03e2638998d10ec09e91d04bed3c657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117246 Malicious code in sufficient_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ba4d30b4c65f1af5cffa718fbdfbee5ed655166c5bee933c87dc6b1f92bed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51af2ac6fab0250d9ae924546f4f927bed60325ff3f3c07675a4f02c616b9f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85749 Malicious code in galih-lapis42-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279688f5fa9fb7ea75c5fec4cb98d1b623c12975a690cf4de2eb64e565ec03ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-semur34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff76f0a8e3d3c5da6da5951fac7528b2e9c3373560d64236cea5d6f962ff4916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68208 Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...