MAL-2025-186172 Malicious code in cloud-class-stack-xml-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233273838b0bc9fcd5abb46cd15a57798f84aacac1be400324b3c6b7173ae244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-ugugfgaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b16a48397ba402b51d239b43c9b80e4515e06b4e05c39e2da2672e02d31e02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180430 Malicious code in teate-thy-sonic-giso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dda3af075b490eed88545a97ffd343a6bfe5e0204cdc42cce53e34426da270e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180145 Malicious code in teate-thy-sonic-agosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52a7fe98fa55608889b85ca50c761c3934520a4467f73cc2338ff9e3a3631da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e91493fb1d96b783080f69ca0d039692d9b78ef91e76d3adc939dc591f83f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universeutopian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b76f8458e01bb8c27b21d45307df8f05fb4bea3f8fde4824cccecada8414e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aafof-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1404cb1c2c3bd5a66d13e91931ac180faa4d79a80000142b715dac00ec111ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0339519aa6618d8b72e06dd874d46a3cd9fdcbf66662f16e792f01be036f126c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda81f924f941dc278f3d94b1a5e567d0801f31d27a5bdd6288016e2f56f6db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-ariafaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdd9d1c78123a631a4955352c9f3c691430faff2a97e90836e009a0a7887d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152234 Malicious code in alfiansyah-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97234601ef72c708c6285f3770e09582f5d13fb825d306af2b500025eb77f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-regulus-vulcan-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07d2b8b61c7ab9e326b8192138231dad82b035a739b9196b7f208ca7b97637f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b8b5a0c253c8e58cb6b450ec34b1b4da65da1afaadca90b314f6ee4c26df54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-pegasus-process-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f530cf05d6f45016a32bf21db037723f65c80554e40a435593ae11fcb19241c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142151 Malicious code in eridanus-meissa-non-blocking-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1ffa2d0feb9939952cae2a8669809201b36d19cac0a1eb3a886e820fa1ff13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-rangi44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b217ca064ec7630fc9afb6ca2c24147f0ac47a14c3f777f906a7948f3273c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_octopus-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6549ef9b169346ca3de0a29944f5245423c9b307fd97ef513b36a1c1d0aa6102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6fcf39fa924248fc2ba7d123f6ced3eb1d0fff5654f73841343e39295ed3a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108193 Malicious code in romantic_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e044cdf74c48b248291556dd8d98e4a1549418c504ca4a736a026b91ae8d411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6978499d1a3fd88fdd91fb51773450c0a3354410f02bfd76dca06020eda8bec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...