MAL-2025-185185 Malicious code in sonic-oig-tmoerocneauaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e750d62585919a24f07184257b851f20b1a9ad55a634e42a7cadae3c1bd19f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173410 Malicious code in buta-fbona-gadfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659bfec906eb033e041da9f48caa179acb9cba15f6769a96eade486d2445194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171368 Malicious code in jacelizabethturnerkmiller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88bc7adbbfb62662d62cb9af4e0382160a3da4839b2dcb610c9330444412772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161918 Malicious code in nasrul-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24b67094c64dc96b2a475d07a0c4c324c026d6c3afd275ea67e39d976b61354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151401 Malicious code in abina-amugui-anucuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfb2d713c1bc3cb6b3a042aa7abfb2bf57d1e690ae5174282b20724120d1141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559cf8dc88ec71f34c4e193bafe9e02a05fceaaea8e37c3e132f5d6edf40b99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170214 Malicious code in uyaud-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b639934a0a90fec9c091eb79b1914f6fffdbdd3787310c26f9db3078ee48575c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147826 Malicious code in semantic-release-google-warp-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befc3050b341d286101261fec11b2cb358d3994e132344a3ffd96727445879e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae380128e7d87d2b82ad55d13198e6560306659f85226e358b62b95cecfbad44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kripik62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7ae56cf2879e048e94da0ad89e17ff1cd0245e4a60327368448880594817e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-serimuka96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b237e9e522969b3d1c490a49c8ac996b66a60ab8f47c79ba31ddb470af72bfcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129143 Malicious code in okta-gado-gado40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d390524172fa08d482d58730581f23b0a63c21be7acb5d9e451402b30226579e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57614665978fde221e49ad83a96dbcaada9be28a1d15fb899d46acb4375bcd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-takokak5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a679017f55c93ba1e993de0c95b89a47c563455423cb90df7a273baf128d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-lodeh30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae04c07b3029ba000aa7f605f6c17ea6b964c6daa1a7869f80a76b0f0c1d41e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110050 Malicious code in uncomfortable_loon_aqua-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c92882fd92dacde956da675f10f83ee743a283da03c7887b528ea2c46ffa0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-miebogor42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8214c1b7bb5c68d96fdca8379f92044f8f95a42d393bdfc71f0522e965ec9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a879c693e43614be9a603a84afac1796dd273ca35cc5b9a4342ec22a2a83778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94562 Malicious code in foolish_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05b0692a6b80345a5e964bc24e69ff40a352b50630fae412b417aee26b676ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91804 Malicious code in vida-kue41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5cad985c0f5a15044fe14dbb3ffa136d8bb3051bf76ed31a8cd29cbafd40ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...