MAL-2025-189010 Malicious code in quantumfoam-dysonswarm-io-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d4c40ddfac96db4d16617d8dbd26b31056e7c745f29098ffc857d010c1e67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoerocneauaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e750d62585919a24f07184257b851f20b1a9ad55a634e42a7cadae3c1bd19f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ferato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28bcbd0cf715f19b08ddfbb6ba6f60107683507ec5cd4543e62c8424055ddce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174326 Malicious code in goodaan-nusafa-nsafigassdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9d0774ec95146167830408b13990771fa49ec4f66b3523b2cd010352f76934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178168 Malicious code in reion-tui-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542480edf3b2b7f314b61fdf9cc3e7eb19258029f2c0270b5adeee72131ea795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156876 Malicious code in iqbal-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b571f9f691b63bfb45cf30941356cec81d0637309dd3e671a514a031d84721f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e8f0b07dfe94ab1786f52bb1aebb34946dd704fe61869a78fb26fab37771a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150469a27facc5552ff40983b0831a081c55e4ce588d339b7648136b75b1bbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169313 Malicious code in trevora-iiisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc2c6bfcab95b5e9cc3735c978a38f4eaccd8e2bfe80f0cc00803b4e3a34384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhay-taum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1dc4d50d5470bc8474db2c84d5fc96d6a8f76639530f3f405b36c7b3984307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133771 Malicious code in gita-esdoger18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bc7078fc504d32d2a6c8875aa01d489a64aa79500bad886d1e91e70feaf145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125388 Malicious code in cici-ongol-ongol94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664b703dca203f0386d3402f5c4f8a36264ae0e5d522e289a6785481604cba1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125756 Malicious code in dewi-bakso82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0945c35af12ed9e17d5b9d8bc60858f9bafbe69dddb62e336e5c0cd0aa815d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kue98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e312fd1fb5627b3fcad9a024b8bde6588a0a4c62de5170b48104c8dd0fadd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-klipo52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a553af89c4790ccbfe3fc6ec85966ff09e9a9122e4aaaf1a299ff5a016e7eaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118620 Malicious code in advisory_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2fecdc1c338a99b988cd5a18790290edb36f78685837e44f77ce1184f6a176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_gerbil_white-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74759b7d01a2638e9a2f7a96f8bdec645acff9873eafc841354f8be35fc5e0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silky_guineafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0102fb6eaf1404072cf8cddface7bebf4be53e42f0f8d2b95aaa131851a76472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102842 Malicious code in fmgsra-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d83fe61d870bb0924ba2dfa3c6a92203e7392adccd6fee1f902a7d895cf7452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106097 Malicious code in nadia-lontong100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbc9861bd53b7bd373e2d8ec3726b211105a7d0322ca2f6ade3cedf5ca9a4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...