MAL-2025-189292 Malicious code in run-script-sagitta-pulsar-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301093ba1f19945b67f4a51c33b12c18edddc6ceb26f3c8bcb80daa80505b50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185961 Malicious code in cache-cat-index-async-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e9349b68caace5888139d6b847199008fcdcf3f6ecac1191d7bf29cd1b8790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olimois-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3578c5502cc9ee86a8c80a193c5431afa859d94e45415156731ce21ea0be7590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoyiacaguab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7b20413a87c452d0840d5ef23d658aeeeaa17e4bbcf23effa58dc870572dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cb1b32aed10b136cbd4f3715c6d97f6a300983e3a22c3e1356a066cb475bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugjij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5c3cc014959b901783595f884d96e910548173231e8260ef585977d34aca89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaibfuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ab12fb8eff29e01419eac996d9d1cb13c9305c3d5b51a1adef004cda6cef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufajab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e915719a8df4400def253efcfc08f058bfd1ac9093b10cf7f589e389001068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutag-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee722dd2c06d347a898820ddf689bc23d19751e208ebd9c6e5f8422242ccc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351d5fe1e7b8d21f66d8c2e9aafc40baebf223fd2ea16600efab09998cc92e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyugixchafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f515cb40ff2e7b535458286a08e7fc2f4ae1e4fe1ebfd95956597524768562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-idulabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2562a4832701f72844948fd44e2d8d5479f11eee193da1b3f824315042d0372a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7973048e94f8e26bc0685d9c60d5f668e8580705029358fbcfe94edc72c9a994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinuhsuouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58603f6c06e8d789ddcecf1a711f1a3cdaa2d73721ef7182d116657b229bb776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuis-kjt-garfuafaawkvdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855df02a517ec8277cd311457b320e0b7940d6d9dfbaa01b20d0fba70fe5ff5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-akgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825819bc05d8778459bf49e40137304f104c86407534bbb8e4a0e00e45071e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-faig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c37978d3b57b5848a81a90377f67e042f7e6926f937fa4973a5a36a8e65bf077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28a2f27add803d710b030611b1e4b08f5430c3a52839891532a9b83f8909f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-ujokuluaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b32d39bf5654281f0c834f9a90367f5037efe91a3d812a21a0aaf89a1200224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ebee3935852e4cffac0aa223a8e89f33ee2d011afe4c2fd40163ba7d1b8201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...