MAL-2025-189114 Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf33e7a660e7f12a243bf4ae70b1401a0f4b66ec86a8c2aa5e877f46d3750826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185846 Malicious code in blazar-draco-mesosphere-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a01697c106728258ab384897041a77198e1d8de26e461f241a9937d74f833c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da57976355a45b7c3e3d81f52626f15dc06c3b89be5f226adbefce786c3a1210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f0b0c0ce52451b3920c6dafef1daf688154bb5a72888d061e30dfba63d743b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182613 Malicious code in imugiay-ajvog-dactamaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d9736c49b643ec105d6d37674a3d161c3041a49d083debcb59e5111d7e7a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179529 Malicious code in anais-papmoa-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e960f58705cfb60013b0563c76735ea25ee4e2ffdc2b58d536858489075d4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1279d7b7f18eba999c739ba9f3e9dbc33ff0006b8a10490d8bcb5dbca77acb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-ivacfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea4447591452880b229dec26d2cfbbe652db695925eea5f7df6a78c788e6da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173424 Malicious code in buta-fiona-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f62002f395ff3aed799fcbdda1a49ca9a1dfb660fd3faed3e8c42d55b08a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175289 Malicious code in kapvino-socvnvi-bovu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d286f6b781ec8c37ef93874f7947189e6315fb0fc7e92235a24fff0f61e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaika-kaliu-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d98ad5f11bbdbdbde1bc5518024466982232d2b355ec8595428b89f8e293ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e25fd00c2f1aef7d980d495c44973121a920ec03b9a7b98647b86ae459eef2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a56abb9872a865ab1e8480e99752121ca78dd1a61e2ea87e6b4b6cfc5d06ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150939 Malicious code in @miptaa02/sayang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e5de6823f24cce2c0d98dbd34415f73685a9fd88b504f141b2a42e04ae0900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150893 Malicious code in @miptaa02/raldsasadzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdcb954ceabf4173dc9b13219d236a7981667748ea77a5eb0e1640561dd7e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155302 Malicious code in gifa-ota-uuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64db71fbaa5022c53a7dae997706b4c47bc166ff3871d5c0edeb377a1637782a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfag-munr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cf37e36680529f561a65424b99af2ae692dcd690731c0da69e0cc056c1d8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ajyib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe6a35c832cc9485e3fdafaf06b3ef37615f91b93deb4635f1665d360d25750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146130 Malicious code in phenomic-dorado-bulma-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76899facbd5ca2109c5ce1e8dc1f897cc7d335c9b6fbf3f78f78d4eb4407770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...