MAL-2025-189995 Malicious code in tree-psi-air-moon-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83074f704eb4e4519a481ac7f001147d60931915820fa8b068b512c76f180ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177627

Malicious code in new-alpha-transpile-air-resolve npm...

Malicious code in air-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3eecbd23037d7be05e575d5f74ef289d9a18340d23cf9473ca5cc5d43000e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0d071c0694c3c22a3951e3426efb4cf3f615941f75cf4873ff20745fda0344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df27176e4154205d48707cf6d9102323d3f4797067042ba5a1d96f7f9092c14b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd302e84318f8a43afc8e79faaf8cdb96e1ab0aaaaf40464a0aba33dece8de03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc0743b0a3277ac95ad6bb4337622915bc03ffef76756a3203c975664cfe857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb807801807394657ab710a2793f94562efad475de199d81df1b38a02ef9e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d237ce07c7dd7033280fc5f70d28566c944f095575f4cfc11339d225d19696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66477acc878f8cb0aacb5930d8546e740b8e19d9b8f6bf0a6c68edee514e57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674ba4908a4035106a59a61ed61aa684e04b7c2f4c0520717a06fdab3a468c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb2fa9164bfd4dcfb261c5cc3956a5baa98949ecd5670af13d05d9529a0e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91e21cabeb508ef4dfacb2bf4856ee698d6d0f0e8806106a3c5e0dfc3c8c209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeec2df43935e58d49a8610b75298a729b6335789e95ce61330dadd5736c35c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf816f69d56956ae91216cced8d4e04c876c6e1eb0e17dbd136109630fc8a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbba6c886bc9f3b8ffc0da8475c836a102405cbe25ff896fa8941f1a1b54f21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361e817e80758cf85ad74090a8f50ff974fb283cc3712c78cdb68c8dda8c3b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099f2885f535fcbf8b77727dc630668f0e8d62153aa7a2e07c9ec1bc46d3cefa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d92523bf1e995a7e8c927c858ce0f4c4919e2d8067e6bf3f84c2879aa496550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da376bdba920c465454ce4ad3af0780e29142d1dd3a25bf843228a2accbe8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...