MAL-2025-139534 Malicious code in aquarius-epimetheus-mensa-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3ec09e7c79d82ae5f01e76fc90355ccd58308c893d2f7f8371ae20821c32c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-perseus-betelgeuse-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fa8f8962f849977da38989af1f68903aba39062e31527b08d77f2cbadcec83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137773 Malicious code in vida-lapis17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76aa78828e3efcb4d49961102ccf3bcfa79730c06de9127ebf7eaca629a74a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103893 Malicious code in ida-kue91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7fd20de2c71a3f9485705c4c9e98385bc28f9814e8950293e0253949382e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-bakwan8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5c474ca81582ab7e3602dd5eff480030c9ad78e4a188966a2207ed2b7109c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-chocolate-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f63ec33e4ff5bb8c1808b2e220c91a5d78c70ed8de16834cf769bb3ca2ba4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69655 Malicious code in nuclear-silver-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9345a1b82d349dd5e2bacb59921d53bfbad93fc7ffdfeb6fa67a7db7b0025d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-ketoprak66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b255c2a8d655b9605a00d646f77c9920fe3c1137a815a7719219179f4f3eec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-bubursumsum25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf883af95195fd621be272b4318449654d8d60b142334fddcdaed4222def4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sego50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fbda22f2006e9ab7138c0aef27d07e10b29557fa874b1787cf3c4c8c9b1246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...