MAL-2025-184894 Malicious code in sonic-jos-afafiofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35195bf589359995435b89f1b92b5008dd9b9ba7f1b8cb6153c27771960bfb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183634 Malicious code in mahnu-nofy-gaoigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57a8dbed1f47ddafff5118d5ab9f19e48e737ab7b563be1a5d28f83b2b12c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f854c7d05615d123a8ad888bf144c3dda21fc839177497ba96904da781ab4ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152063 Malicious code in aji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150883 Malicious code in @miptaa02/olaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49f8a463f8eca05bf116efb6376cc710471d8a0fd2f1ace4dfe5ba0a3300f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166349 Malicious code in sunden-dilak-nulikanuin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b46601cb35f96b6bdcfcc8b5804a4c21ce066e997841f1962935c4513ff231f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-grus-cross-env-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0088893a97fa72af405080a5377eec93ec689ed41ab62249ed9e0bd9265bff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148665 Malicious code in thuban-run-script-phoebe-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23563332488068001aab68f970057a006395d7bfff942c519c15225d01e2cb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149102 Malicious code in venus-aldebaran-postcss-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef214a4133030f8fa65da187e1e76bafcd0e723c5e4aa8b2eb3bf3d7588f2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149371 Malicious code in webdriverio-impulse-chakra-ui-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587c860912493689a378634f242528428044131ac8a9bd7369fa10ae5443b789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved-amethyst-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc184b63fe725240edae92c06b75e82b34d273e905edcb0272e0eb47c7ebd110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125432 Malicious code in cindy-klipo49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bb811368f2542c8b7d04f30d21eb189fff30263cd70f3ebfab570ca1c350cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120669 Malicious code in ida-kue50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73ec09eb2fd6ba4be72732d04fe9dd4d3b2cd558617fb104018b87716921ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc7a8462a47fb963859f9413895c67d5458d1a886761b181c0958ba40d1f35e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-teh12-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2627508cd3b9043f72a4684227b2b7ec7d32c2a85711d8cc6d921bf199c306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-ongol-ongol94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99c21ba24bc445a1ce068e0f5d49453ab4e1c23b09a276051c5c4e30a5bc7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-rujaksoto7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709ed1a76f94bd8ca41d25182062878e764a339895e2cceef055fc79a4b04f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78163 Malicious code in fauzi-klipo68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03edd6fa554df6238e8e7dd44f87e1feb5a756556d3dfb1bb9446920f3c6a29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68753 Malicious code in husky-rose-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a45eaaeb696a35d74b044628f2e629befbc5e4b56040e65b9255c7e0a5f921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-rujaksoto20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d3853bf252c2a73b985a3ae6717bfe89814b011ecbadfb32646d454c5287c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...