MAL-2025-189168 Malicious code in release-it-perseus-ini-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104971ab1956bef5ba298bf575f621a9701915460abbdf6ed5d42771db7e9dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186514 Malicious code in deimos-concurrently-outercore-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa621761675fd2e3ec7b468f01d71eee4ac950beb2e51f7e89d5533a0a6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189303 Malicious code in sadr-dactyl-xenon-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db46a51c94a6c001ca87f74104924bd66b9a1470fc9625f9b6c2f34acf9295b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187306 Malicious code in heka-mdx-kaus-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272c8eefdcedd52dab7dc0dd7eef12e6f770658cedcd0d14ba9ec787e9ad9cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186466 Malicious code in daemon-old-mu-interpret-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dda0ab04e2ba0fa8f40b2f82ba9779c443b1f435191d835b5aa780d630f42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188586 Malicious code in pavo-auth-sedna-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8d23d3284dfb5d8c816252d592abe31569453c9b4989f3dbf8910826ee9a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoia-inulubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4384d94567591c6f34d5bcca003e21228282eab22b6ee558170b144bcfe29d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iaimai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ba70aee21e7cb3e5acf3465c264d0ce13b615cb34feec3a7b8ad0e638f3198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alnaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ae3eaf7c599cd54d8f6ed569720a0093fe96e8a0e8252836cd007303838de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoigojahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a48724685f18b37e32aeb513fc2b9ebc9b4742a0d0a1c29eecaa92996ee9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-ugugfgaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b16a48397ba402b51d239b43c9b80e4515e06b4e05c39e2da2672e02d31e02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3aeef911cdfc42ebd90f8a22be4f0864c276fc308d159ae16da5f3f67cecb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauscdocavgmigl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e0b8b17873a387f3534b8094054301702beb6a2716c4791e6ba8e4d48034a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a5f1ecc502ef5bd23f3d2464941d145dd43ab1c1758af213a85415fabe8b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74239e377d229654546d40ba4e0ebc294e6047e21354bc1dbdf02c77a0a80d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20329a7481442226ecbb5a1adaee38f9ae516a4c3422812ddf3a2b966d29ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dacutamaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5771c90e2bf9e50a02a341f29528a89643f48383cdf213ab1618b82cb235f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5740f7ee304d05f3c7ae55bb0318034fde2a9447ec74bd3b4939d5cd5e4c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-giaiuasfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ea6a2ede519f82e9b0471ca2e2711db9b4285b58f40864fd2d4d8eec77c413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...