MAL-2025-185761 Malicious code in bash-water-resolve-unix-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa208583cc81c4598465e3b44b85048c1d4a747fe9087200fc8eabae365d5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185455 Malicious code in andromeda-grus-leda-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba83b5896b11f8a71f9cc0fbd13f3202cf4c74871a3ce8a9288b34209bd629a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190381 Malicious code in xenos-upgrade-orbit-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22aacfc70714c921495c0072e931272fb84602da273d378a399fb895e36b109d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187384 Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab15840c7162a1c78bb10f8ff332b175c7f6472daf912e63eb81d372dc63e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03bf4d2991ca6ad4927724b4c282268d998bc3c680d0bc2277463d3be66a740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1e7f26b1e03257b0a9de39250dd26e57309b94a5669863355501c2479a48f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cocakmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57038eb96fb5a78c6c5d9e7a282072fc49b1e501b11176e136646f90f5e498c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadeae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fe97beb379d933ede7615629558a59ec49169f8f6eed790dd9ca25da4f347a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184186 Malicious code in modaiv-kvu-ibuagoufaucab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d0d28bfbe91b7a88d650d9f1208b8d7e1956d98410f52c489d8e692ade55d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff31d31551cd8e922fa0afda1195d08b39c347a7b6ceba7cf3377e8a49d0c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184074 Malicious code in mitouko-ontcami-lamokinbia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c2f0acd2323d9b27fff1f7f119bd63ba4a0cbb7c0352951240086e166e34cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d6c142d9dd3ce4e89f65dfabe18d3cf27b0da85a0b35d23c7278ad0da4e4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185202 Malicious code in sonic-os-afisigafafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51dc77fe91f8f16da94855493ee1d2d7624dd0bf33f56a0d7df7b6a5d0e76158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181778 Malicious code in avangi-olika-tbao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa49ea64e1752e8e6d86a9c83a0d68a8e6317c4634ade546acbc3d7b30f7334a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183363 Malicious code in lobac-ub-afdmafdacatfeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e95d40dd065d3ac16c6ecbba7f119369702ade4a442006780fb6891633cba58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-hujaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90e62a88969c75706ca194eea3c109a9eff185860348724c02902c74909e7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28a2f27add803d710b030611b1e4b08f5430c3a52839891532a9b83f8909f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafefg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbce9e679a2e4300e1dc48fc9f4fba28a029fca7f7a40ceb39bbc13576e85d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cbsav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab83d18269f22b80276b6429a52bfab661d216993dbc971eec6c0f01796d8d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civasavm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae36bf735b691bfcb2cc9f1c00d426e2267f073bb726b8a312c39bf52b1573ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...