MAL-2025-185157 Malicious code in sonic-kuloig-timesex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fece25ad3d8f413935c2c6c4c770ee6341259f06d545bbf210bcbd5b53d3988e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-urat-disa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48eb8098646aa0e2f0b1add62aac99707ba38ff88071fa58f19bb60ad890843f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-afofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051597a7caa0c84dad2b37d6263d5778b6daa137c45162f4758f16e66ad9300b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154140 Malicious code in dajouka-d-lftac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd6fa81286f3800e13e4ebf4b5ca5945ddb40be5758166051c1a6e49e665013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129836 Malicious code in rifqi-kupang78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683fb3eb137d48e69bc4707a65185fb83186eaa11e39c198b9214cabbdeca1aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-kupang86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29f45d23ea4c12a20b4009cf5d4336d8175d96a740c05865fbc471653dbdafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111806 Malicious code in devoted_quail_turquoise-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a58a663d92c6369f1d3fc801cd854dba5eb636fb8fb719ebe38d96de8aad14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mervin-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee091ca8df8a4af46922a842aa53192a469c4e08719388cd1258fcbc6668455f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110949 Malicious code in willowy_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83c3eb6e38a48bda78746a04770bb6350d77ae037ba4d31515db3645fa76075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100632 Malicious code in cognitive_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc27b45abb7128423e588bd824718cd2158506e36078590d231bd426de48d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84540 Malicious code in dewi-rujaksoto31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b471b2f4338b1f7467f3ba1591b40d284f0370902000e07098fc897361057b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tapai96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556f834b94c2b3def53f3e03a78de32d41d8fa5c5ea4dbaa496a38374d53d419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b37b768baf0031102e4332efc568a899699e747db1bb9cfc7dd7751983e2f996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gandul20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d7dd9812230682e8ce4cada887e99fd01599197540fc5ac7e0f4da9f1b47b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...