MAL-2025-181119 Malicious code in teate-thy-sonic-wutlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b9afa5b8cafe466c49cf7ea5557ed4cabf946426c1c9132ca6af7c46570446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129871 Malicious code in rigid_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5246e74001a97516fc1c7d6afa5a64c80586224fe04db69b2b1c78157991bd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101736 Malicious code in dorbella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14630e494d3d13b13d11cc8525a610713d41f28c8c617b9cdcf2258ec882f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-takokak13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cf5dd3f941d98cf81a318c382c8173c5619107542ef42505c3a43d11151dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103468 Malicious code in hadi-sate85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8264878bb24db670c5be3e937d4552bfbb7832ee5aa34395cc25e3d5a94476c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98793 Malicious code in local_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d4267b774ea0e81925ef6687839be9be2648704235e140324d6df706ca45d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-botok62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6ac0550cb2a3908705f6a0def74e5d15b5308f8362e469b03c4d2ca0a51987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71520 Malicious code in weak-green-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ee7cd2a95454a95feec509c9f8052fc205989d98dffe334d277ff433f306c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-rangi68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b765588e98eb2a42dd206e4f0851ca69a31d4e01bfd5968c1ada6e0bea920fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...