MAL-2025-185138 Malicious code in sonic-kulig-tgvia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b181b23f1d3a02deab53f9ed6117edaa96186bf442545c0e8f11c012454d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-lemcif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bc5123ca367feb9da3655839d1ef8499e0841982dd4e532df30516979c9a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d950a5a3557187bb0d81828abcf926e87d8bde169f915cd0d243476e32402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogoadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57deae5406e84cbe012103109d05b087c3dcd884518a3d67acd67809a17a6539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176886 Malicious code in nuragi-sutafia-dagutag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed07cab35025d695c5a9f9ce5027654a059b696ad27885753b803509b8d77f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175631 Malicious code in ksai-kiloa-ailoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1fc55461b630d248ead556b0981fce5e3e257073952020b7f585a676da2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177258 Malicious code in poglymer-oggh-agaiahgian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da314d9e4a854bccf4794b8926bd0ee1d15e7b97a0ad515052302eaafd0057cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf4431f2025fc820236ad8df76526d3f61932180770c78a2ee5c4664f735510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-guta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a808fa4bd39b3275439ec242ba28e51d6b7b6bf5129d8cbe5eaf3a82a9866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-misua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38d8b07a509f1dad53e1d4e68d9b74c96ecf060eaaa4b05756597194db7de1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154331 Malicious code in dia-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e3d096c1c4b2667da07b85edfa060ab4e7c7b5c10455f09327eb261f630ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142701 Malicious code in frontend-chakra-ui-standard-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520d1091a873c4269619f99e8e6a1a7b3b45d36e1ade66d7ba940a0be49c292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-teh55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92a178dee8a4d47c2d2410602429912420da3f4ec25db73a7889fb592a30702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-peyek19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d81c311e1cb601a1ce5c9490f9f319a674eea0abf39ece0a91f61576a45eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great_ox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb10416774f962426a75510ea4cf66a7fb7ae2ac45be2bae1a816c327d0bc69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-sate85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9674fd4ea80ee44ac2e3784da2880df1cd4c5bf8a28507a48dbe29bd574106f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110143 Malicious code in universal_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6efaf16b32a53b85e96e436bdf78f9b5c6d52640f8ce250e24131cbdb24572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd5166d9671b235ca3f992f84668d48d313973d58eb53b133c7fdd9b991cd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98584 Malicious code in zaki-teh14-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ee1ebe94b87b04153f1d04a819a70013efede88c15b572bbb6c2cc7c416d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77da1f7b03aab1e28e6e27046651e34cd7359e7300e182cfee11c8c9fa4aed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...