MAL-2025-184952 Malicious code in sonic-kas-fagiufagugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a537d26a3f1602b0d32cd0629586d1858929097fd1dd03ca591b48867e6125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178629 Malicious code in savion-goodmn-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797fcc13318e5b4aa370b9f23fcb53f13e4db299ad64e630f99f82d4e074ae67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172106 Malicious code in apasih-me-pol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2eb836723c59d77948c5217891c4691bc7d0faa90e46250d91397cc1cd6b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157427 Malicious code in kapai-afama-agda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5d6c9fbb5ae3d306196ab9466c20f4146936eb55ab86df8a48422894099a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-klp-kalouubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2737725f60a49620b3b2afc3d0f605cbb52426358bfd8199591e22adb969fe6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160261 Malicious code in maya-teadf-mukiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580e4983b5987ca0a3ebd7a70121e6ff2a4f032c81b014b9b32f2b6336cf0dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151570 Malicious code in abuh-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82597a0195b96150895c292c4e99607f11dddde03d976e1a2ab3160a653a6e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120639 Malicious code in human_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24032d827c7af2deceedd8b03936a8042d297826703e2f503e71ad6d5b30431b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102881 Malicious code in fortunate_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bf60f8b19ab09af34a93d82f9d8143fabda606689b34f9c466762f2cd77454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106686 Malicious code in oktafian-menjes29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e528adff89ce0d50fb5eb22793ce5260aa47482543c3c48a097537101632aff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kacang58-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616e86ab1eb5040d8d68b7157173bfba6222403b390fd29fe4212e35c3d4740e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-nasipecel97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8e8cc29ae834f9c1ef4b31c105eeccfa037207ad46b6fef7993a9a61c7164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91121 Malicious code in tomi-bika65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf5e9fe38f0750729713169a204825313e3f944a4a27a8e42890d50669f2413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76389 Malicious code in yanti-lontong10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfda54590014db181ed5afc5feeb6c4f3003982c469d7bc40f1204e39e06718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59964 Malicious code in anxious_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd4a08e1c600e68383514e7db337630b01cdc6cf6ebf6ca0bebb730fd97625f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-saguer36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5b26905752cc2966be32b50544deaa36a3f92125578562f9bf1d51dc4a65ee The package erick-saguer36-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...