MAL-2025-151867 Malicious code in aiboa-molipie-aramsmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb048d4db6a8e9912acbd1d3e0eeb77019e0878e8d3f39ae1bdf0a9f131ee83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156456 Malicious code in inal-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b9aa620095b83524ac2959cb3233de61f728ec2766c272f309ae898a92db29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162093 Malicious code in nokiraifiagne-asaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f02740d13bd5a7951e8427062cd59eddd86311b12a12dbd58d5d2804c0290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161550 Malicious code in nabuf-otmbin-nuyaagad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a962f533ec64f82751ea948228edf231ef0ac01254a8defe50f28a05a5a8724d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153572 Malicious code in avomainah-frauhufu-faida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de23d211307e4af0b54873b0957253aa2aee7324bc7ba67861467dfb9434ff06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163024 Malicious code in nokire-nakala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746db44446b929b8d50b82eb2193f6dabdedb500aec891a0a3eef4f19c8236a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152284 Malicious code in alfiansyah-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af839a08410a47dec8dafa7fc59a93aab21fd9e75fc2712757d86594f5774d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161635 Malicious code in nabuf-otoin-aiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8931a138153188c25de19843fd4d7795372bbb6a5df891b1a2186a8ba799fa74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview aes-core-valid-ipherv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview format-fns is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-ora-odin-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b1a4c7e5407ea07e12997e513d73dbbb0613592dd22ec25417ed91ee6bc5ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-quark-loop-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe676a6d3e7e3665526bef653839a527974f4af6ce865b9901c31d442682f32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-centauri-impulse-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714eea88b1ac1b803edabb28accb30f2b86addb9885d388aa105fd12c99bf508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-indus-ursa-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01acfd33afe87d4da74593d9804d20947cd8cc0b3d205c8ecaf679bffcca4ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-mongodb-leda-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac868d322cce021ae4cda8e245af3f8fa418596dc7f29ba457f1caaf7666878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-standard-terser-webpack-plugin-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5497a671c1aebf3e09ba8f4b72a87f5f04dbb1c4d50e8410873150d2e2023aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-build-castor-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86d03db2d5330cfeba064e29e8c36f78fca0430be8e57ca4e45d5a6b398028b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-ignite-chalk-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ac628852778f49428df04f0f333889e78112037446428392da60d03dec11e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-polaris-graphql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9622c156d137c3da2d50e621520c1214571a89d839cf468ef5f1e2e5d6d8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...