MAL-2025-186261 Malicious code in compile-xi-small-star-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4093c99a795c5f49e5a473608bf2cc7fec08c50ea65fd9dfe7bb1d5937deefe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190361 Malicious code in xanthus-zenobia-entanglement-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c87e30b2ade435267565d6e87f20d6053104a597bf4718d9287de3299be865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188151 Malicious code in mutation-cladistics-graviton-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b72ad4908dcbef9674d785f529c71aa2981793455c795ac5532487e8fc7328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186628 Malicious code in dotenv-sedna-inflation-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a63ee5fbe8c7a17380d2b2176b6e0387bba7788e959c4eb1e36dfa779195d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189425 Malicious code in seismology-jabbah-exosphere-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45e15fb1d80e15c00756ba9c83738595f758665d0520bb6e276352be59c01b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187592 Malicious code in java-short-string-java-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d597eb3065711f0aebd72850a6455f97fec66df5b0b7ebbbf9cd4342dba73aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rshayt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67f9aee887cf6bb9f546f0445f1c7cd84d4f2bf8577db5ba7fd81005890fc98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycuruban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05e8e6de9f9f146b9aa93408a90a1c8d44e748d7b82561d911d75fd99c71589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ff20a5fb24f88e41415224033cb0aee6107054aa35b94e9c9fe191df5fefe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumajubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e5357160c9092380ba999f7b03d7eda749af33a7f65e37de54f79e3952bbea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrusysyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42093684a00b5d297d4b3b23901d99c50a178355920d27359621806336f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afhbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dac29e60f3feff5b441d4c7205f30e1259bf589dfe2a46e9407a77653317a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigiyagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b3125099a106cee39ad0e7069d3f752dc4c58083216fb71763accb99c0abcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b957bb54e50e683488f27387e494f4373f6997ef33f42c5a2164012b3d2ce19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafiufug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42fc95a2d78c0efa716ca01c0dd56ec4121709b43c877684a3ed2f15cd2b52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-systrt4tf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c4357db147e0cf23d40e4e42e112fadb8c41b0528c23a5df30915ad082c80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182874 Malicious code in itale-adci-ggryuyegfjbsgbajtrnnsuegqytefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77892ecb6c3d7caeb808dd31238321e3adb46885e519c4fcf176b1775b42a608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181998 Malicious code in flights-lutg-oidmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a1671745c2079ec4163497048c79d60e5ee9d5b1b569ffddc39ca2602d7a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182624 Malicious code in imugiay-ajvog-dniea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1ca104cbfb513b5b49043cba7aab76e2361bac6db9f434c4f6f50405837ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181965 Malicious code in flights-lutag-obo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd661555dabb507cb2551fb6667531afa960289b63d90eb644f276688feb016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...