MAL-2025-186174 Malicious code in cloud-star-parse-fork-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8952f1c640e356dec0fbec116b2f433817d877347505c728b5161b584a49ef99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186941 Malicious code in farout-mongoose-process-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7370c65864930ebd6bacf175c8b7aaa4380ff7bb716ed897770cc7119cbbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafuifaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcf8e0e046816fa25f9082714fcfca93fa1eb9365cb8d3a389c3c8fa2b76491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnfaiyugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddefdb83d59d4f1a44c0d9761c90906271b27d395864a7c3f24928805c32044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adibal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761e1cc77ce5ce1834363046303b894b962fb9a1ecfd7427dd3c8ef13fbfc41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070457662d9e722929bd437d563898e0d14fcf904fb8850ae35c587e79ec6fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavugim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5234a4f70088802541d2712233078e3f8e610d790f1d4cad5ff036cead5e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183141 Malicious code in item-atim-kubuskuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b422a40e06f0b263bcc4348df3c6a6ed30ec3d8331a38ce649a52ae134755b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoycab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a061400c6479097e8768ce18447a2cb6188be5bfe8794aa7ac7d75b10a88ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgustduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2544e9734a5d4be31355237278167e1daec4bca54503875bff6fbfe3fed73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15aa163a62b502905eaca5f12c98831e7ac399b48292cdc9ae2f9fd500a3e1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26689f38edce438ae7b18ed3f3841510cd5c01422b7825f5ac519d3acbffccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ea972e1e4f3a4f1ada421e9c08f37bdf0ef96b780c4e0a0f1a4b70e9e1af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpojozakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0528886ba111bc4f5482aba0786589aab3be654fef844b828281df49ad7d3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fa32160447e2282be30ca23775904cbddc40bd171dadae53db61d60b41dbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisasuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba70864138c80b55f95dbc4cbdffa6951c1a6fbcc87745bbac17f0c1b63177d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygugjkolujnri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153d01550968bd9b988141f40b0f94c1818b72edc502209839d1a31230ae5cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db84f18c3c9957ebbb46ced2d12589fce23cc9199ee3ff8e40b7e2b25fb09cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47dc2c1e11474712db84ba6e3effbc200467d07dcc428b27023aef7d8695055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasvgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c70a84200963cd9ecb30d2292a445b4714fc0adf832918cf98ef8b9592c852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...