MAL-2025-181108 Malicious code in teate-thy-sonic-wozsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63678e5aa561e1bb90abe9fcfefec9efd64358f1f9bec4451bde3caea403f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d34ddf6c7aff7ccdf6b5c216bf7467244ae9808a418545f1acc6cb2e386797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c710a7d67a4b42714ab73df9e2bce374f08f6d7867b72f3a30f47d591276fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170078 Malicious code in uinsu-technls-portalsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f6987f468b6fb9d58a3f30b953b0e2404e2f275daa1b15ad625a828fd49a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotauma-anafugaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f24198910a16449670d9dcae01b3e6220be69b56481bc12fab87dee235dfcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee42eb8df0aa941d8f0cd50959de8470784b289a07e282eaae127b5732828012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c840145a5e16f2146eaceb7e7b81ab6ca65722a404126dacf6b2f3e20f7b23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151921 Malicious code in aibona-moile-aromagiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76395dbbe03b589573d1bf7e01e446ec0b3fcc2385ba96e44fad1ca288889fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152296 Malicious code in alfiansyah-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61435cfd2dc52be4888f154a2c62130deafcd16aee87b47e7299e7bb1db39642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145941 Malicious code in package-perseus-weywot-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c0da3948896e0aeaffec2860a96f542c0f37b09b504217c4ebc4ab8620d806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-phoebe-commitizen-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c7087b7b287470476889ddc426136442abdab2d013c904a1f9e9d558f3cbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-oncom46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa56247b9d33bbc960768e76994729de47a6f3274988851888cbd6d94ae7203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-sambalado82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88704779b82a5fd0943f56457fc424f6f8f176ecf956e84622aa285947c4828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a308859baca5d59a2f78bb9510f4af61601d82d79d631b4806362d0d778d472a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_slug_orange-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b826c861c7d3b49ddac8ff853f6e5ab5ba46f4a5c9b2ef6e47e499b3a9d86e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112061 Malicious code in liberal_takin_indigo-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab7807a5edc123a5a99e4a73664ed7e94887707ca08c08eb60d94c994d03433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110760 Malicious code in wawan-tempe98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03726e2e1e16c3017af5467bc4ace292e54ec3da41981bd42b53d563888b7f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98633 Malicious code in bold_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e4367f8e6682246115e6ae013b1479af0153074b3d56d72e657849412168ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88171 Malicious code in mahesa-rujaksoto41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c01a47708f2e3bf0c8642cf4325ff6d6c51d18e111d24b5ea2a4c677131880b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89289 Malicious code in oktafian-sambel21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa25df08c1e9a52a1e6dded4e1ebf9e275a93e613475961c19c41e8f66e4d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...