MAL-2025-183660 Malicious code in mahnu-oy-gisostsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245800ff90c2f22b0478cdd48b2c7e0899423a67d912520bddc6ada569a23113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4798665b638d60fa8f41e3fe7875d6fbe117c5fb32f0fc337f20ca9d506fa188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-ofofiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c102ebd82fbb48675de94a56b993d94327841c9af5fe0979592a803752becb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169579 Malicious code in uarfug-mitauhi-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9361397ba1176f3a9008451517bbac6ad3c8fd39369d3341ce46c4a7012037ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b9697f242593bf013475e10beecff219deb22e8fdcea397472256e8d52cd74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128920 Malicious code in nina-moci4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5afc1dd4d7f6dfe23e3fdbb674194018805f8d8e6a568d2823a5ab54b6d462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110802 Malicious code in welcome_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3071b64923bb94700536297d3081efa32ea55f759457a00bbd672e667a7baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054705f779d16180e49705e956bd36e7b5866962c18e6be7b3234ac856a2fc1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-lapis87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377ef4477ce1d96609bb4981fa54e995376f8604d2362c57c6cd6f7246881fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe31d0ba642218d63590d1e45a70db35769ec76bba83cb90dcdc3a0c7ccd3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...