MAL-2025-188938 Malicious code in public-gacrux-jsonp-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7177770d01679691e54cf89dd9dd30351bb2201f3cc0b6e84da2a7becc65a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-selenium-lepton-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfc1cfbb199ea1ca3bb90c697618a7d74ab51f4a88a59c1319771b74755a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187801 Malicious code in link-user-awk-bundle-throw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13af1c15269c3456ca5cec6d14a4862505a34f1cf9fcfb6c89f3e739db65abe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185029 Malicious code in sonic-kos-fgigiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cca44fe6ada394dfd30efde3f756f3dbb8e497508920dbe5c4a1e010ff9d98b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184385 Malicious code in modiov-kihn-afbaufcaducxabncmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ded9524ade714ec166d85b96bd398702cb39598da00fb421e5914b02d1b884a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-difzcfcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27325955e81bcd2b59d9ecc4ddde91ccdae86dc306eb25fe5c0e9e2015cc6d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9073f7af806d515175efdaff87dbdb96f98a181a0cc0692d1d19850c46999366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178806 Malicious code in tanura-sui-dufaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d578cfd5d7a24b92407090933d339fb3227816e7d25adb9899f814ea29a7594e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174827 Malicious code in hunim-satu-aniunifaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36137157acf73fdb3a895af6fa012458f116cd6b02946b5421c0b49ca02716de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175148 Malicious code in kapvino-soadfafi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19632d246bca5ab33084d9e8e2177bfd5fc491043a6495f2fc7883414af2ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724fb08c2a9e112bb1aa6fa78507fa0dfd3ea5618b72150858b8d7029e828c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174030 Malicious code in diva-tutai-ivabau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d626dfdfc54970194d1ba2d3c1c606e327fae606f9e7b84f962eb9b88778fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176968 Malicious code in nurrrrrrr-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14af7fb87dc5c654623f22c986a5cb43f82ad74beed141af49ac93c5e7a82ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177874 Malicious code in polymer-avonf-afofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bcd8b2f4da87a3074e28a6f02b4d1d32379e2cae31c256fdbf6fa86a00fdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charloliamwhitetteharris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21cc54d42e717c5a52b4640f0f166dc7ea2c164ba14362a6e64776f0a1108571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a458285b5130cca7c56044df1b222361e286e8aa6a29476d004f39c6b30fad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156019 Malicious code in icha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb09fb9286901ff7e40445ed548cf13d84f9833430ac5d061d8823766aff9031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c563908c1a7ac47b40569e509071a84f9c176712a3ec7ce140b3658ef2aefd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169468 Malicious code in uafaru-tuaumat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594b427ead85c0ef590e003e5dfa8a71ded6834a17e528ab69ed8ff82ad0161c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163852 Malicious code in nudla-ofogiar-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4c142d99b4a6f5edca8706a95c79a85da48c13f837681f36c559109ef89b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...