MAL-2025-180241 Malicious code in teate-thy-sonic-ceski (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2daee4b101887856c5b8228cea3d99cd8d71cc360b184cdce43a9c7ea4ed0c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/yyds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f2e776f31441b732519e14b7245567940b4063be9fb49abb02c9b9fd57271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-kronos-warp-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46463893d487d5780c5b22490344844b9a5e96f1b8502d896a2839501e0e8b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147430 Malicious code in rigel-bulma-mocha-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4d1d54b8f25c3f3912f8fe0efdaa4779ce0fd2a782786d350f986a550ed31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134247 Malicious code in ida-rujak58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30da18103a39fc31d06ca09c630deb485ab8983ffb909df5b80879e5d0cbe346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4648dc227ef4a4ffd9158f8913ddd2f22233bd80e7731214615eb28b2c8994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tempe49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1bbea5c3c37d344059e8dd0a4edaba836a847bebd5ade8bdd090f02b1eadeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99493 Malicious code in anxious_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f594eb7532b2977437d8003f67aca7c8ef9a271a8a212b96bff10e16b0bf79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107969 Malicious code in responsible_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6f07ad7c2e3f96c3ba0fe80e6b47c84744559ec6d88dfcbd2f2e18c6612a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2050ae1112b1fd2db251fcf97e1f556a0f5ee1c2ef805484687222542fb907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fb20e16b6d11da1e439fde703afc361281982199d1d640416b232f3b884fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...