MAL-2025-180849 Malicious code in teate-thy-sonic-piwkez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e89fc7603b1f28058b7854045baba46b407f243f7520ed671dc5c1aa2677df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180710 Malicious code in teate-thy-sonic-moti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e6fd6909c997824b275ac870648861edb2464abf2a91182fe234f086a698ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfag-munra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bfbbf3e64969b5e3109a19bfe161a98a6e1efdd50f282f06a7d7c9193a4bf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147582 Malicious code in sagitta-browserify-zephyr-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd36dba1a904be5cf2cd8b0152ea4208241db504429bc5d6446aa4d5866ffc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982e21bd868855cdfdb87665bb01d0ebf8fe0f03cbcfd99aacbe49b61238b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101305 Malicious code in delicate_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5433e2d607ade1216a8cbea4d791c11937ad8b378e988bc5caaf2dcd853781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109184 Malicious code in strategic_tiglon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92290064b58c7217e23be34c2e95872c1511379c0fd5c8f8b9ffb3b4f053a57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-rangi58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056cad3a73917d290343a5dc074e8b657552e04b064cc743720e18d812b9642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12185a2f0cf16d9c00bfb766839b780b8a1362915d02fff27e70eca73cec21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85472 Malicious code in fajar-tomat93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766f44ec2b5dc2c44f23cfcd3d116140496969d0dbd078d54922388a375e7d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92656 Malicious code in yearling_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4dfc109fcd2ac50e3c4c235737192870ce96386419545095947c2d85db8af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75818 Malicious code in udin-kupat65-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb19fb2653daa338deef397a94703a3b6b5a3e98e103d3cd1846b8e6d5546030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kue59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48cbaa09a90918c6e20d80e79aab2fc8252d16e750174f6e593fc0a5987f949e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73716856672681604eafee3e7dbab4588a80af44ee7a977eaef0abf904f3ebee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tumis65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c608f148da2297e37f1c34e61303da796aa363276aa874206f0713643de4507f The package budi-tumis65-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...