MAL-2025-180655 Malicious code in teate-thy-sonic-lojzuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6ece7f94b955ad8f3951046bad602fa1a7caab09f233c2e26744b5aa41cd8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180422 Malicious code in teate-thy-sonic-gibbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f2e337dfe4727193a19fec0890f0f320440b2b11a7db815baaffeaf9d71167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170932 Malicious code in astrowatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fc276608335ef31670ad027404d857798e518c471f700a6cdd1b215fb7819e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amuguai-anuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3141e48ac861ccd86df0af7e4a92df54aa9919622401fd2353a36fbb83988ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-non-blocking-meissa-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cec9674fa8c21b97c7e02d0d892a48bb74115e2d4201d7b5f13aac80eb74583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132599 Malicious code in comprehensive_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8953e2238de7a972c1a35c6b6b07685866b06ea559f108279c7c0c000c98b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-brengkes23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd621b1195dd26a6ac28ad6db9333b6083d84c17408f0bbf1d73000dc77ddfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary_thrush_indigo-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 237ebafc6b528ea2ee7d4b12792228a99a2e8f9ffeb370663e4cac198b4f0b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101507 Malicious code in dian-donat75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7074452844df0913e0ce07f49fecb794e54a3c571f00c462bb8c11a2a87e2d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coming_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0c41901137a45002eca56926bff5e931a9a40178ee78c6ad34fea4616baf07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94224 Malicious code in eligible_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f384c3ad05cdd1f3eec585fc5ceb4f8c4be44b43d5ca297f82c9432861ba3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-tomat60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819bc4b1c6887ce4b69e480630619859e1e376211c3717648302b94e158e6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4029521c301c4ce346dbfcbe6c24bca964c66059af363e5f6376dd8d65010fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...