MAL-2025-180071 Malicious code in teate-thy-py-kaghe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e12e8f25cb264417a2f6e197f297d131def79fe512cce51fb1f23c5685b80d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172625 Malicious code in verts-otioo-namgpogafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e94a70567e4ffae02c87623e819394f32bc1a3f7f96d1c26afc907e3eb0d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161688 Malicious code in nabuf-otomian-daju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a016a08d7a674076314810ba64fdcfe05a13bed8ff35f86dba9cb3c3edd7604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167856 Malicious code in teagood-sukuna97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abd962b58e030b939be49c4b73f1a3ccf82d84127777732fabb9f14a4be9e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-gorengan17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c715c9486db5ca773e2caa9d2cd0568d74597ac9a4322be7fc98aec544c5e20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b1160d8983e6eff80b2ceba62f0d13f5fd739354e702cce48d735980845bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104555 Malicious code in jittery_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ccce60473cc16ab479bf2e0f82ff5d24944f21a8010da7c9b0aea62f7ac9539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d198cc7c592e34e410725aef4df2ff58c3d07769c6c12e61366a4204cc9a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-naget13-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ecf02f6803e3216afe54a97f35d9851f96f36b5a2ec7f7662b7e19014c5fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lumpur48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee99242632a7be0eb32b1a131bd2dfb356823f337a021b73d5e35bd89252d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-ketoprak75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcc2df5269c95db7c3deedbf8602c97066078e9fb45e2acb0c8437cef0d1e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67827 Malicious code in dizzy-aquamarine-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff4af257592422027ae97e3cfbeb642bb58e844b34b151b461d62d42f53822d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...