MAL-2025-184934 Malicious code in sonic-kas-aagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd879d51f7729decd647411d9487605e60a885059e38ba5be96aafdb0d7fa67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153056 Malicious code in avminah-agfimfagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e49e67e31ff6226ec192a4335b7e85e25fecb8b137cff5a07c63764e5919098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49183638ce53476d9b33281f29db51446c1849cd3ce18cadf2f7e4948045fee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152317 Malicious code in alita-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7e5c10cd066a51eaa6f8d8150b095792f4bfa8ad1b7f8ec72bfcc1b3e4176d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-perseus-betelgeuse-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efda70048ed2933a54a646b0cd38e0b1e034822156a10da273d06a2de20ffe7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133714 Malicious code in gilang-lodeh62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b90c3d22a1b676d533a92a9afdb7a0b1a1c1d58adbe514b59d6fdfb55073ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137521 Malicious code in umi-donat79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943d3e2feaad12aaa86b03ea4ef653ac8b61b57d245a5ea018d4d67c7da26a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136241 Malicious code in philosophical_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec709fc7b6bd84a85b86b21f15345453a00d9f39aa6512db396a6086b66fcb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128514 Malicious code in maman-lapis10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a8a7047acbf36ec4c81706e95882b07ec57baad648b4e6d2a34417874ff898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131745 Malicious code in zaki-gandul13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c441be6b4319c66f4f1706527cb7c55ea665c1779b68b2e1e90930cc55154b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126716 Malicious code in galih-tiwul10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d27ccd943965f548d4aa8d92b090564cfa4d316336c6716b0ac0c0b669bf4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mieayam14-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284279e1724241ce5cdd75dfe7ee032716dab73170c8678cd6a03b5bc54b1ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96113 Malicious code in puny_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef40dd41be2966afdb3d65dd86288515630f943f6f1fbb596aee54e0bfd360db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed0ca13ca282d5bec16808536bdbe914d93dd2918bb45747155caaee2fed7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-mangga83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffbc8be3bd542ae8ab1f5f01ed6f9e726cf1d716cc92f4e3175759e6cd5bd16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73369 Malicious code in hendra-getuk47-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cb7c651d627838c76e39e8a1fcd8060173e56064b50a794f25b5771b788c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...