MAL-2025-190144 Malicious code in version-pyxis-spawn-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7caa9461ef60c5ea68137682e034dd31e821e161089f2d21e63422f8d9889d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188362 Malicious code in npm-global-sublimation-augmentedreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd49961f0d54ac7944b8c564af29d8e2be7f5aab114048fc3a52eaad56e34ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gammarayburst-venus-tectonophysics-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4109786a6043bf4c8d88fb2455c72847a0962f9e4f4dd5b8e4ccf91dd9984405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hash-uglify-cluster-info-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a3a53ec24253c6ab5d1ed24fd3cb74c1c53f7311dc887ff7434622f50ad233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sun-thread-monitor-void-sun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047adcabcc874fbcf09307af5ef5c1dacf009d157f5e7e349936d9bae83a1fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176355 Malicious code in nokire-kushina33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a44f9bc2ba271520322eee524b2beb8ae74134c6f90b9faffe7b465e553796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179259 Malicious code in trui-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177201 Malicious code in poglymer-ogaguh-hgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87c4ce2ea3b0747fca86eb651d7043643eca49a2a4290a0122cc3c795686e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifagaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d65d2c6aca7c37ad7d1b5f9999b3358cc62a7fc8c388116e24c47accc7b8b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167754 Malicious code in teagood-namakai94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d44c53c5ab5060c3e1725baacd9cc65ea0328aef11f154f70d92e8db90ce584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155465 Malicious code in guras-tuya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efea36c11ffe8afe5ff4001cc8170cb130691437181e6256587c891190ab3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157927 Malicious code in kuroichi12-silly-excited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b630ed6b5f91ab408b4f950d9eb0f38adea1601163338300819bab03e6ddb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iifj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958864736a9a90f0297d702e86db536733059eb87b7ccf39b6327b1eaf5d66f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afgagagnfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5d5c86641e2347de6f15d8e974b3e22998d69cd1d8d8d1a797f2f77c84c467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliga-aiamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da23bf5e620fdbc39061da5a50fa49ad0a05c839b0a89827531b45817a015b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7fa42cd8438e718dd20f739522fe74552ab36510a99268486db5395d4c5567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiule-amaniua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6987055f9a916bdc76f0f44521e35f518fa3a17b2c05a08bd75ca7622b678019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150952 Malicious code in @miptaa02/ssghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95391f099b0f6d20a2b6c2d124df05f7a9c7a80e610e16df10a620698b4b8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169620 Malicious code in uarug-mitayiuhai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea21295271e40e797d330926a1b91dd5749cd87d660e00eed0dae4cb2e14dfe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaisor-dar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1749719adcba8cde19724db1105524d3bb03a470d318dfeccb315afe9fc0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...