MAL-2025-185171 Malicious code in sonic-oig-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b1c040ebb9a953443d98531a63825e597bb324cedfed6b5b7b9e6d6d8d9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183067 Malicious code in item-at-labieagyeyaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69a80d4f4ce8e3335b765b8c05a6501d6bd9ee3ca2590ed5126e5db38e73a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178451 Malicious code in sahu-satmug-fafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc67eb55b86d50266212f15d987eb25946b8156e81c2f678abf6f6244f2ad2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgviala-madasazlohiakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b227f2e550178f8c7f1f47217fa373b44ef39832c39bc307ea7164065a3d4568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6a07b540b690728d27f912b03e11c2b9622c5503b208b7a248759f2ae69ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607ca40db9617286de4a68e351a23476a220b1a8e9bcd8dbae69e454b045cfa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165943 Malicious code in siregar-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0618d48e914a382dacb404a3f1f3b28a634c0181d2879e063dcc2fe154481d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142374 Malicious code in express-epimetheus-transform-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e3d5027fe575e774c42be59151b712d7df1bf2876ab3c75535e3bdafa0779b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143018 Malicious code in gravity-bellatrix-farout-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840af6420f87daaf0dc5682a4ed0da2e4e51c0d3acc1380a1e56dd4d9ca2b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141481 Malicious code in dagda-protractor-lynx-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0777c52ef5f09972320dcd393bc8cc30de3e52c2794141a8d80b22c22325e465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135965 Malicious code in ocha-serabi91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78da74318ac71931480040f22bdd7c7fcef2103bd96491851724c87f4f553972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-sambel23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7cd1a0c4cab72b295a17de53866babd5df593944defebb0bb55cb5a3f0a3bcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126670 Malicious code in galih-jus4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d0ab022b6036e2c04ae01721d128fbe90de1a32a54d9511d8abacc42d13b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3ea26753b7e371540724b4a652c1cb0b16a95e99e05eba389e5aca7771c5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124295 Malicious code in wibowo-gulai35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ccb84cc53be4a70b66201e38c2465f73959d0d962e5b894b0035f00f125572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120835 Malicious code in intimate_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fda5480377051f35fc81144d60db6f9ba4f7b5fb93e15891ff22cd9ef851708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107596 Malicious code in qori-nasisayur55-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d0c4c958efc81f470338f06ee71006fc3d0ba33a1819d2cdcc2bb199e3fca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88426 Malicious code in middle_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8267aa96cbfc6d7e6995cafb2b0fa0e4b4bdeb65c41b47721710b1ec7c02911f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91416 Malicious code in udin-takokak65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2084b9bd81fa5b8f4ab06f7cc5a11cf3e627af67fe97d5bee21ce012707b5da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-lupis78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021fe220e4cdabba3eb1e0d166ca84e3f0e77ff1390b1a900787f4f60d20edc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...