MAL-2025-186038 Malicious code in catch-daemon-mock-emulate-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4424acb56cb398c60eef12481aa28aaa4c0b92ebc9e818fc755add92f63edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188559 Malicious code in parcel-paleontology-configstore-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84db047468bfb79279779fbe823f9d8205a87bedcabed0c21bb484de423879cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187359 Malicious code in higgs-commitizen-aether-archaeogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b8f29b5584b26dd967953bdc8592ed22336590dbf5289d208e0883e9cb3e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188749 Malicious code in plutology-ariel-subscription-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7586875995a9248c1bb0d69061389e43a86bfb28b5f8a11e6aef21281d3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187040 Malicious code in foundation-node-config-farout-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3793dd3ff731c5c1110f0f04402bcb024a4a5017e8a91628e170d29b6403c4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189104 Malicious code in redis-acamar-terser-webpack-plugin-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6796676555503346950febf9220667349738f8b77d07e9b3bee2eed252988ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4017bd37bed218baf8180f7a8d67a732992a8cdf361cb6042c6545f2bf75c2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafuifiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2754226febfbe72f3b3f8d03a73ce426b070c7a4035ee8ba8d1b7aaaf7028202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4696f5497362a28ffc24161db611b2c81f11e180efb4772e3eac3d25aeecea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaiaufoalfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0d5ac3c308c7062e9a036356d517980ac103892fe67f65adef8a9c4f91cc5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7eae4c0606b881eaf1d5cc9ace7cd68e85afa28d1269cc3fcefda0e329d745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgusytduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba486481c94ae67075ed34706194b26c35d4116cad8bc7dcdc71bce98a20f482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololgybu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09053def6dcda811d9337dc4d28b9a83eac24c39ad8ae5e40d1e217de9b81040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmafdacateu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728275778c3b4bd199f02e88630656b033e17b6cb4c2fecba1ca0d28bde5be1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-oliutka-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fea3b998b7c48efe21a67dc736b4f723f4744730cc3876a089aff79124b10db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agugaaruf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 630a6bcc37034e79cc128621dbc9f7f16662436e73c3f2e92a2165aecaae5010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugafih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288259eb6705a661c986f6c6ad638355875fa79c0d5af2a9b874c9b4d41b1f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77232f97b19a9a64f75f16db25244cd2503b2403be7a8c29c166c615e7aabeb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobacuon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95de16ce4aa95ba461c2d8ffbcad7e307b443730c4a424c44bfb182a696bf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dniemnf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e8b1658f7d7c1024f68fbcad6c10e0883d2b83bd3893f728d8ad70b270db2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...