MAL-2025-189346 Malicious code in sanitize-eta-promise-error-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d20cc45b0c3561f876e2907c05759af75b6ae061f01d2d3240a3aefde578d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187952 Malicious code in mdx-development-elara-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc4bd235720b3f28d193fb963d4a38119a58061d2fb460cd83c464444e31b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189631 Malicious code in spy-fire-kappa-emulate-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387b32931e4b8b2b93f0b637405b93767f8bc7dd5b457a443eaf98e4d9600bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183224 Malicious code in kisut-difg-diguafuavaotav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f3896ad180725bfbad0ca39cadc686b7f9d995f5255f013a8491ee95727e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fe93ebed8298a4c907524d7ab6678b24bf41c2f2a36384a1f25c9677eb9d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47799aed05285af30b7b2b7dd395f8dfb7844d7670739d6f011f2f847862775d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fa050d1e6aaa455e04b4317e997470f2225979d80cbe0db94b32fa7a767801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiya-sutnu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81e63743729e8ba25b93ec0a3246f798db389aa281add8768cc4bf9c52ab10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunvu-udvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cd263bd877b79059636cc5b21811273cbebcae82f27b20e34fd17f7aef26ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyafa-sutiyanu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab41a4f8477bc0ea438adb59036de7c06774a4bd1a0b9e75a283275295e0ea6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiu-tumva-diadblu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff36d7b3e4d57508adaa0f200c803d6306f140e5aedf2712a6cf2ac02cd02979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favcavvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba7ea3abd2fdff5159a5e05fe57a0c9d0dddde47a166d358f960fa7042caac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177415 Malicious code in poglymer-ogmimh-avigpafdoaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10d96e582f391be94f91d743b7da3deb701ccbf8d43aac63c9c356f3cfddc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-odgafadaggagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e94b80d94fb45459ca04f5571bfe187cf68f9442143cbd8f571a8c8e53dc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afiaavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572781b23ecf8c3ef21aaa2a787e22e280a8c81b9e77817dd6a41bd5beea135d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172710 Malicious code in abttteng-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c46616923670e8aea3380a14adee4ce9ae03663134f082119ebb891923e6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177012 Malicious code in nuyar-adadar-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a705103e7e62e936e56296fedb9fb95fc3da652573a3a255dd1c94554b0e35ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171254 Malicious code in gamilquiche (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a9f0f4b5d50714fbec0a2144202b2579b60c2416bb491a8da5251a63922bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171260 Malicious code in ghalibbasit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b19f78c5cf6a263acb76d84cb0416132e26e1cb1b3466961510a6dd0ca44dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-agfifagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0c921de549bb95c3914920378ada8c9e0c5e8ee89902327142fc6868ac398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...