MAL-2025-182183 Malicious code in gociay-unga-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f045bc08921b29101aa7b317d0d92b48a7ff9ce3d4bcc388e61fd1f46d8e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600f268cab32e8209105aa29f0b5ae1af0881115137ca24898f9dec8d7c67667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-naai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e68f7ed52093f24448664de8fb49e195df6c3caba2c763e8ab132ea431a814c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a261d538b52f89870c4316bc0bf4974990725871769e03255009fac5e4103bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc11bda49665e1d0c6a6eadb86da6321ad15f9ddf359ed457014f1df80cf7707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157949 Malicious code in lala-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e95d61945586d332384e7d4fb844461f13a6a42fef83208aded48bff811d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153805 Malicious code in bitha-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e54e20580c3f7a9cb385ba037ec5daa6339ac2414981819da936f39d4af950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-element-ui-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebeca5dc51f6d677f9931369a829d3c0eb57c1863bb8ca1dfa8400cdcc5abf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131191 Malicious code in wati-rujaksoto93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d86dc1879baca1bee3387daccdd0c163aab688eeb0b45be2e10b6ea0093db7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125217 Malicious code in bored_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80ac62bd4d6def128a9c55d1b6facd760a5bce1e02500841ea0e578ae80fa79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-serabi10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3225b6e2a7cc29ea63b807b079101abc24d158f2eee6ab090008b27d8c3a2640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yammering_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ffd6225cec84b25a743d1280428acfd61368576f359ab277cad69cc58d182d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-bakwan78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3108dd19be366af22af721fc6c06df60e3253c74202a9f78a9f6bedacd6e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69798 Malicious code in overseas-teal-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd73502da3b570b70fa56c2f5130e415c9b06bdbe4397bb19565e192a84aaa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50405 Malicious code in fajar-sambel40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca9c6587d4d84daa0288c9a84982392a9c855b6a8cf36859ca1f253ffe07361 The package fajar-sambel40-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...