MAL-2025-184973 Malicious code in sonic-kg-tifffacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9fc3407503798f900605e3de44e4bc1a55cf9145a0baba5de7ab2bc511622b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipoha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346983a0d6a387a81fe0e2106c3943c7b2d9e649823ba7a799dfc39cb92909c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164720 Malicious code in rino-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef6fc654843e612d47953bf0b47da5d9ae9034a747cd9390d9b56c3ab786ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156919 Malicious code in irassdhi-sedssad-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a414f0dbc120caff5c0156ab72a37c3a1a181cb953d89bf146fc282963c512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218518ab7be6d52d017a1e4bab2c2dde52b5cdcd8293171c9500258c2ef40828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153727 Malicious code in billa-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b80ff63d669f5830affad471d861ade73e6f5990ad1aee51ae5d6f6e554c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-protractor-npm-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f75328c3b60f551922c53082dfc1c61f9372109ebd52c544380f42f1c95a86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-ophiuchus-indus-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d007e985a3247da7668e6a5323b5a2600c9ea75aa3ab5f68e692cace8f43da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-mangut98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900ae839b63a703b53fed542476414f1776308e9bbd8effc1a2c45b5f207d16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cdf5632ce436bcc58b7ab0c6552764dfe9f5195c9cc6ae4501f37de6609f1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64890683e8a69e79e9e6cba18a4f35018cc8e6fae16dfd380ed6bcfa18ecec39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c9a5b273c625fc47132bd8873f6d36691f9f5b8098e4f7f2a7927b1c9f970c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116771 Malicious code in rifqi-kripik93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55220eae5e9f66a21668edecd10dcc53f989908b075947806ba5f70731203927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113034 Malicious code in cici-lutis62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a981da3e8da1b90b3a1f248884ac880655d991958145e58eedc0829f96ed9c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102362 Malicious code in exotic_wildcat-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9a75571fb91db16e88255d5d7ab984a3927efb6d3c3a4a5dcd54ad465a686c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92849 Malicious code in zain-tomat41-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19195623064d1ef825651e440452905b8363393c764adca78e63c84c4ade657b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-lapis19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f181fedafd82dfbdf67edd458655c99226b059438a9e86a2c8feafa659cfa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-papeda36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b4400e9e195e09a32f84f20e97413a51e64e30e4925f5d8b5d015e27fdedd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea65856c5691e4e5bdbd16bd6e6088fd98942441541247a86013e41a36474119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...