MAL-2025-187879 Malicious code in luna-mira-eslint-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68370c7fb19d1cf0730a09b2a14c5c2b57ee9fa7cb0c3a9a10b30feb22bc4b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185430 Malicious code in algol-troposphere-bellatrix-oortcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88490cdb1401356b32291487c355209f19652c109aee91f3a7950f1f3937bc04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-cosmochemistry-electron-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c704ce8181f207b2a385dd35c0b6123c6d5424d76aed8a2fa42ab9befd4488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-eigenstate-install-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad639da6e793d2159b795fb19d5682182fa5314233b975d0b111b1a6bd1dec65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baryon-sublimation-apollo-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3790c726df7c55127d84310d6173ff9fed277cd8b991cb51403c52e43c5f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189603 Malicious code in spectron-chromedriver-thermosphere-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c15b55ba7e54630255482e6868b8f640f70daca32947947e5ea8822a50d97d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-giauasfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d33c10dd508f60d91e710b5c0e125c1a8053d35b8083d4c5b8eac6066b30fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184487 Malicious code in moki-luni-huojakiavugjim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac08a982db21ec96bbf28280d6554172bec37401417107a3fa630e30c1329440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174993 Malicious code in ira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6467432729941e6eaca9157f04812bf3ae5f2501e370c27a52f1c942bc4953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172098 Malicious code in apasih-me-pa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ba157684accb406377a20fa537b95d30b62610991f574d9c0b7010506de34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-diook-ujaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca66cefcf73e91886c39deed8ac3bfc8d740e34e29082a2617b292a4ffa6852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c26702fb24f0a2b66317111037d1b367d369fbb803b8382eafa74be14472566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkumi-kunamlauib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20273852e4489dcb9554f95b049a9c714c19865ce5a0bf064c12b3b8324000b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168507 Malicious code in tealove-nice29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd5feaa34be4a41e8198323563a65f07facb3e39712ba41b69999064203126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-figaayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ff5256ab9dbc98e5e7aeb6e19858c75d25d3a4f51c7e7e0163fd7e83b06995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abi-alaufi-avuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1a9b66eb87c153fca21a7e4f477a01060a296fb83bd7eef9e07222807669d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a431e7eb6d4a156ef4113032a163af3da2ecccea7457f91f211545f861b2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161909 Malicious code in nasrul-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6660721ee2a9bec71361fc155f69422320a8c1dc2cd690ff7dbd127d385e5bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169146 Malicious code in trevora-aisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f73a07adf3e4f684ed93bec0113702bec8127e9dd8eb36100fafe32ec2f71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164546 Malicious code in prayoga-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f465ca81e34735f01541f0935b053cad221a60353f83c064e0ce21c63a27a839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...