MAL-2025-186984 Malicious code in finally-notify-table-orchestrate-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d4ecfd3ec9e536b6f5c276f6a533ced1d24590a4a00d5d059c241e6c2fd05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189165 Malicious code in release-it-library-start-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348aaa3d96cbbca9efb6a3b8e5c7e01f9bfc1413dce9e60070864b028329ab09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187654 Malicious code in kappa-cache-process-byte-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8fa30fc7c162a6094a97409707dddf8e50e05a0d0106276d65c351e656ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186193 Malicious code in code-code-old-reject-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c899170e707048f7a4cca5c47d5b69c5e973289a723f30a8f0ca015ae5d82005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185462 Malicious code in antares-aurora-mocha-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889355acffa58cb18b880f4ddd5e587f1056c8f5bbdccc545b03da310c4e347c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dc41825423bc5155475bc6a3498a50d19fb4da5da6639d46d057ffe04d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-coc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 231e70af6270496b10470f3c372cf0d86cb52e5626a1a5093d62e59ace831751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjinhtew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3fcefd042caf68a4b1112755d2d83608d50b89e71c6e40acac5b261abed63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183001 Malicious code in itale-dci-rfrtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65044a716cb24028f7ee25e91a9bd49960270a8f009ca9a2601fd0e35906a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoycab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a061400c6479097e8768ce18447a2cb6188be5bfe8794aa7ac7d75b10a88ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcfea0a4c0f8a5861e494bc6d94770fca281600d82d8faf70168c595be84ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0918062cb52b10b2c85c3ecb368e8ab79a6279c94b248c425b99dde582769b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80218d43debe038bae4e822a495618aa2fb4ffe67d4c10ed73fdf29524ae6521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b671caa2c6ecf037f0352ebfbff81fa0713fa2e4726f04dce1fdbaa23206fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ba42ad0a76390f74a368e3740557a49fc79ea968a50bfc6869f61192a23d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafufaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d5bb5180013553d541c1cf34abb0b6cd3047f3175bba6ed78b10f4b870c801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182158 Malicious code in gociay-uinga-uufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51882ebf4c438c396f69721f4a514c4e07dd9b7cb0e9de4ffa5fb42209169a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182702 Malicious code in inda-fodja-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9aaa1d1c244d977d1e3a8d77525477eaab96e46cf4c30d16c2a638dca4c7c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iayafucmff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dee116b6cd8d6d4f7d8a3a178c86becfa2bfb6ce3b8387b70fab7e9f9d61860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...