MAL-2025-185420 Malicious code in aldebaran-quantum-babel-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e432f722c7db5ff51f734dd2a1307f770c81673653a4f35fc65218ea770c1f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ahiezo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e765f52640da8d10a64360ae50d5e29a81efad8879d93a07537995a2edca7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177082 Malicious code in nuyar-adar-bidut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3b8980ad10386f05783e2efecab61c1aa18ce5e2f4f3c726d0c1b23b0c236d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotauma-anafuz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3a169d553c969022e35e706d737be148f1b4ac42dace0056bb4713e4511e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87e004eaa2a02c39eca5cb2272ccea1b9a0b93f33c6dcf127667e9209939ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-deimos-procyon-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1d77642dde07d3fd52edbf4d4476515f45d4e83d6b3392ffd5e5aa7050aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-wasat-fornax-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b11210d9eda121cf11eccb91860419ad970b15ca9cd114ec8df21e82196e205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-semur88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d46504069bc98809d740f8b28a9fc82a41af7b3e9a74a46c19a5dd0b6a3dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83124 Malicious code in alright_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8639254c755bf29f4a57d78e9f74b2e35f9f27bf632df500acb64f94bac86417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-pisang2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9afa95e3350b322e457915a993f71c110a541694549a7bf68b97391f96eaa6 The package arif-pisang2-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in tuti-kolak30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7ffc6e7670fc4ebc418094ec6d54ad1c5db5e2ba576c433fcd909a5bf9c5d3 The package tuti-kolak30-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in andi-bakwan91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053b2ee902025463cd2170585c96851a4447d78031152fab5e60439cecf9266f The package andi-bakwan91-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...