MAL-2025-185218 Malicious code in sonic-ots-uyaidoagb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cb405ceb939860e23ca0a4385fd8f9fa1d47f7da88595ec831f982b6ab20b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-fajmaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5237effb860b045f300b93e87fcb3b28f46eb47e2a7152a0e94ba095e05322a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177265 Malicious code in poglymer-oghh-faaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef0f1c98ceb540238e809bc65d7fdcdc9a4e006b2772ec544eca908664a60e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173486 Malicious code in buta-fs0boina-ifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bc94b7cbc11cab9cc9d34e9654b28f148429de99f92624de3b070923e20456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1160ffb1ce968341fad746db182ab92b48a28a8f715b41781c5cc65eeabc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160251 Malicious code in maya-teadf-daffm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60aac466aaf98cefec6ceb727e8572c2ec16dca77f064a7031fbbedaa2a4002e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161132 Malicious code in mutdaufs-musdadaiop-bustysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9557a4eadc58faaca77a1b3611f6d3f315fa256aa4ee84d7db203f864baaaac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147433 Malicious code in rigel-lint-orbit-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38cdb45ce2c006f7a290eeaa9ebd89179a65844456fe247adb34b597f3473af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-dodol86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e42b42eeeb082016954f9ed7015599a6745627d14fd99bc5e76686786eec31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132151 Malicious code in awkward_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8f7980d6e1b938553d83a334bee040e39eda88635b481de51c2cbd882fb2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138417 Malicious code in zain-lodeh8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d6170169db08f09b435468a86e3004a5b096455204ea9368f5a99b72fd1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lapis12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdac0be48de332e05236733fff99c17b8ab1676b54330c533feb3036a0ade3bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67615d2d2eda356f00b0ab85bed419b5e11a4d676d2e8a9026f1b8a414a242ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127134 Malicious code in hanafi-telurtahu99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c71e90e1432de07a491955d6b79951ad36b36cf90ef19d48913491f7a562a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-tomat69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d01aabff466e7dfc5f2618185a2ba44cee9f5faa521222e7cae132c3b6bfb47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-klanting82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de29a6e91b5042c9e7b228b7f30ecf856271972e0eee2602b0def2020ec75abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112996 Malicious code in causal_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56bcfaa6f8606ef4de66b156d8d44c61f3fa250b03d9035e311807952f95d6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108849 Malicious code in slwrxu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40609334f486e3638a3819f834cf8e39b963bcf233891b30c8fb7e92febeb6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102514 Malicious code in fajar-kue9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01dbd7e242dcfe3dc456183bc62c01506042d3b9f3ef9595603509901391157d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104802 Malicious code in kiki-nasi93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e8ea3a38a10c9b7874cfd32cb5d16b12beb1b91ddc7ce4457dceb9566fc48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...