MAL-2025-185027 Malicious code in sonic-kos-fgiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272ddaf144809d894182063c1348b143529b10c241b2ad070cf5805fc689fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsaghoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcc4858c7f45d041ced19a6aa61662875cc4c9d9bd0258bc56532f25d7bd162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178839 Malicious code in tauhur-sofi-dihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252d8da77df5ed5ad3b95cc60c5fca6078c21f34b56525684b1e180d7d490b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astronomad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caccc8c7dfaa96bb44fb9b85559163d2204c56586e9737944542833519bfc095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170787 Malicious code in alexanderwhite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342cd5c3c12f415d40217860aa78a43c0b7050c997f83913a5149d847bafd783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170693 Malicious code in ahmadfaiz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dba1c41a4bec6721309be147910ea5a77c2925311c5b31b36041129679e0603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153474 Malicious code in avomainah-fagais-oguyada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdbdb6b4a4637f4ce524b867630d868b6d57765175465dc01c1cbfc8d698668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148391 Malicious code in supervisor-corvus-css-loader-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e717c0a7c2be48cd214be01d42a303508b2d0dbdda6904c59955d4168e4f36a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extensive_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49e056610c97927367ba3c922af24d61986a14a478520f56d91a95e045ff883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kacang14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2715e93252e81934fd25c323a4af86c31caccbf1b08d1eb68296b57eba65d99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-rangginang30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebcde47c7f3aa31524f03b4b0df477d34da7516e78cac406cb0e08ce119d493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4224edff97aae510af51e8e7b025dde29b9752fb701ecab3278fa7d65909474c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_albatross_orange-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d268671cec5e80ea66cf5a1827f8ecb2eb829ecd76db8d634c71ff286e1f1e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108802 Malicious code in sleepy_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c2e0e41a23b0fd8270ba1f5b03d4e5e602745ef4b4f17bebc5ee9207687c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107807 Malicious code in reginald-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0190c6bef403b79452ddcb23e3420f8f97b434c7075b127ccd5da27c2861bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-kue58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83743c34bc5ee4a8721d33c693028d87a3d31cc3094e3ee9ba58addd78010e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-kacang64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0947d8ec91f80668c430bd2928daab875bd221fc5e54154737305640cc0126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a71d9fedd5e3b96b7f85f4235b4b85b48db3133599cb5452048a737fceb176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83558 Malicious code in bayu-tapai82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1aff4291e7f7c32196b11a5ca7c6ab437490615dd36779a259d933fe6e60e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...