MAL-2025-180972 Malicious code in teate-thy-sonic-tofbaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b066da24d5a3c0d29b249edef7c17a3b968ce20139ec09ddb4e3d31ca0618051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-nutuygagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8070e46baa68e0f7081370ee773534340e624b70d4b826a0230837f0bcab7f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomin-nosafahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3a192a058d8e727c2bc898654645aa85ecc394bbe4c8d35ac48abdd5c26f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf4d9f2e4bbada27a18e7147e5652af7ffbefae9fec52846a5c55c4a84896d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153262 Malicious code in avminasah-agfiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edd534a293e73792a1b5b1fdc4e82dd71dea38f1b7a5f7bd93f19224a03d3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-materialize-hermes-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988f0f6bed7c9829fc6dd7e606fbbd189ed26bde48bd3afbbdc2023c20065626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140463 Malicious code in cassini-dependencies-leda-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb33cbc275b61facd852668d9413f1420be2154dbeac2ab9fd7d70de7841899d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sambalado51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba09f7ed72e384d93ddd68d887f3ab509011a551df550beb5224f48010ed8693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122221 Malicious code in ocha-nasi1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15942b5fc82f0314e4a5ccaf4bf969f36829fcb77ac59624b115af7c7b11e285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lodeh99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c322a653dc1d5f534d3e55d8d27b72054cdfb2ddf5214b2bacabbafd22811b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104534 Malicious code in jealous_deer_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0ea8336fe952e79148ef47f229745b824b628a0b668988e71d8cedb1a9cd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111434 Malicious code in zain-pisang69-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21569a6cad52397b50b5488b1ba8bfc322087ff3a4a6dd7fe37d17d445602413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc632ee235d4774850f1079f2855f7f4060df24afc8910fca5e861dfa9ff5159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f4bcd33989428330e6c8aae1c8283db894ed217f5638bb88994abdd130da0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85954 Malicious code in gita-klipo48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7533d48b4d057295a68d4bfe278422e39c11219df49760ece30b216981aff81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tumis84-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ce3e99f2cdb7c36cd16c786158b10ab28f80b7abef14b4bcae0df43a837277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-semur63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba58621db19c902c63dee21f3307cdcc4c151a402da12b767b3e943bc18cb496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93045 Malicious code in zul-semur53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4908bc032c5ebedbe1e53e094eb6fa4daee20f21a20ad0809dec14263f432dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84858 Malicious code in eka-jus72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f03111082258a490696724641a62b443767e181741c563bd537ca1b6a75ec7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-oblok15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d190b9c5540d08a9ea16400929a51ed71333943a8b3696fda5841addb4e763d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...