MAL-2025-185064 Malicious code in sonic-kots-ubajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994f09c03d3c8c06631347faa28c4466569d27c2b7fda45f10fae136daeeea76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-dka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52cd371cb4ec205b7fd12d404e58554e2dfdc1e29febefdd532c852d2c62fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guntur6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b6c63eaabafd4d1696e5b9f6cf2523596548a56fbf46d0561730ebf6017cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788055a8312f5cb814cc5cdcc27a4a36a1f8501a084a4ff6d57c0a966dca9325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177834 Malicious code in polymer-avoafifa-fagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8134ea32b1ef1075e16e87cfbb292992a45d6a86257fbb8913ba5ff92d4033c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomo9r-nsusfcida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e5a8db52f58ab32e8723382fa490451a6dccd61eed25b4415cc66eb690eecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasimbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c09b1feb9902380f19c42b637d2f86c03f2dde7ed16a7e49153e51e184f379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163543 Malicious code in nokire-zabuza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adad3fa2f33a028abc3181d7e92af7eb512235251ae33debc624453ad6d3de5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef09c09438ad9b3646d53f0adf185bd3ef3a5150d1169f2855116c15afdd436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162873 Malicious code in nokire-loklok21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bef10120fc4e7b45f5a11c2502c14269e652f4ade6ab6c991aa034b223616d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6347bd2e8f1ea239adc023613607cba7923e08f04c05e740ccd014fa4526ac9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35aadbec019ba9cf56b87ed1d77cc96747f76e1b343620c0929ea8fb767ac51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162599 Malicious code in nokire-kilua13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa198796da64f836b6d7e8c9fc85dd0e669ade1a6bb2ffad30e50d431e07251f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169965 Malicious code in uinsu-lot-bisabm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e679117cd67e12ffe9096c2eeb02643bd5528bc0ba8a697396ea3f43f46d6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-u-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b1294b00af63ac9ed2d1cc673395e42c6478911f9f9cc5b27482bea8336728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d487e15dd5469354214e2b01891239833006f7908f1dfe68e17eaaf4e6ee1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167245 Malicious code in teagood-nakama77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d1a2cc928fc736fd0e73d0d4bc23e56ba25225a223de4fa4aa5688bce08350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164586 Malicious code in putri-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17190d07a37bae36fadd3ce0a2ded6d375f2e1098b4c92109ee12e81215e01ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160136 Malicious code in manusia-tavil-maasdfudfdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 551edbcffcdcc1efa8fc505f81378d7109026066944488f01df2cee89858045f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153363 Malicious code in avminh-afais-faofaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288fb8585f2a6aa403d407e3ebb2548a9ffabd6571927d76226417b7e966509c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...