MAL-2025-187069 Malicious code in fusion-publish-query-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d512720b57f461578a656406e73eed2aa998862e62e2635a60b469de603a5928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186635 Malicious code in double-rain-protected-import-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8581e04e65ec57750c45a77518bc0bde32027cce7cec3092673048972abc390a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufaibafiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369e0637ed5bb8619008c4a91046259609365d3409c40c25b3754a75bed8d5a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fig-dikanamuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8352224fc64eed69df96fc1650991716f3b4cad61fdad4b9012009b64dab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173583 Malicious code in butanah-fipofa-ihfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a073bf663c10d1af6271bcbfbd386a78dd931f745daea61e2d0e5f272ca5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-led-poldoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d533c9e8b8a3b8ab48c42856844435ba4e3aa3abb1084aa0f6a9aa0e57485d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomaboin-nohkkjigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce16d62cca70d092f228b8bc2902f6fe223af69450a68b9053d22030a47e729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163703 Malicious code in nudela-aaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a77b38c12c536c290d327436007054a419eb00089b1b405a5f564cfcbac20fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169136 Malicious code in toyota-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f533b447942f09876718e53b392b4bcdae109595f4cd3c892ae40efb2f87ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154760 Malicious code in ertacssau-tery-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623237c9008e038b2dc882a140cf92a3b2e587364ddeb07d68ee7a354deacbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160230 Malicious code in matane-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9ec5fa8537192b7f2b69026ddf904011a50aee23f06977ad9582b6221fd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-norma-izar-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6202e4dd1c6acb703f9349e84d06f1a5c9572de5e85b4679f9f4475475283e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kue32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c272f630dc18df852a26fb4a8323666a71a808ede8c4a554f8bf95a2952a359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-taiwan92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae755191d5c6d8110c7c29b51a97b8864ef3f257359fc4c78a0095efec8419c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statistical_wasp_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562b38fdfa555737748a1e99ef3ceed8dd6e3d348fde7ad321bc3ada163d3bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106618 Malicious code in okay_bobcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7263c4054b527d46bb38c18f60de301f603d7ec694e6930339d7dbf9006d9389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kepok96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ea506e51c279765e35c5de5fd4ae172bade3a2110e0ede61ac5a44e62e7bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exotic_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f191dfb43e060b7cd515ab3d0e950c128ca6d55fefe3ab7d69ccd202c24ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94067 Malicious code in distinct_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da23d5032b2771acba7058b39c10cd0bfc2671c0e842684849dcb7eece1a1d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...