MAL-2026-10263 Malicious code in abuden222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c141ada78ccdede0bb49a76d998fcf07eb4cc60c58cce5fdc1b5933b85a817d The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

MAL-2026-10269 Malicious code in abuden228 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15ded0c14059932e82f8e56f2b6d6fb13ebe2da3b51d3e17e048044e9266716 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

MAL-2026-10256 Malicious code in abuden213 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a014a046e0516c12f5b1d7dcebebc2451633c4987fd3c96aae43229501ede141 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

MAL-2026-10277 Malicious code in abuden28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58dd1a008e23641f5373b4593347947fb72a1a199e2354ffe75c79af4066d98 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

MAL-2026-10352 Malicious code in nottuff27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b836372198329677623bb152dc7db76b249d842c0d10a3ec94d9ce2ae467827 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

MAL-2026-6136 Malicious code in ratelimitsucks6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebbee718bfa55eada8a2d56c9ea228e7b661364827e71995fd456027df7eedb The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

Malicious code in baryon-perturbation-javascript-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e3b91264dd6978584ccce3d20c13f45009b8478f3c69fb0ec077a6d48a37fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facc075dd9444f2723af86599f1c0a112a283b2d101a025f16374e4e5a91ff5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-neptune-vulcan-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2c9d5100cbbf9025a117af054f96d788aaf9bad8a5366d887bffe7b37c69c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in function-assert-orchestrate-theta-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced639df901c0d1de13cbfbcff06848335dd6fd1617517443157c3e3ee78e72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-dagda-query-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb85b42a5c537dcd9141514d6280fb515d53ef44c3e7801ea47c15aa7a3fa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seismology-enceladus-comet-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0edc944e35e75d3cc120f551d1580a20f478145a53e2e6ca603a6964f447ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-stub-key-fast-minify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c2c8f6d14460407b52dec97db373eef1b32d2587cad3e6194362609b822c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-photon-eris-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bc318af39702e1bd1c0c1bfdd4e4af1ab27c81c777b6853f7a5acfffbb10e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-titan-pavo-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1598783b15eca6936335df4a84a0344e4d4d3e714804992c93e368d3a8cf3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-easy-dog-float-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5383247b85e0c729c376c538e98461587e02a8093897571bde55b8c251dcdfe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenology-tailwindcss-cosmogenic-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8930f5ec5584cebb34ad1297b7e483e8cc42152b117d3b097a91ef8766b46289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-cryptography-paleoanthropology-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8375332da92fc519c44a3234f51bc3152ffafedf0e05ec57d11f6f07e55f08d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final-uglify-decrypt-enum-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51cf34266ad37aa88ee54ca8fef0e48089c1c23d25a4a498c6d0188672152636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-json-express-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3cbd03b3937d2d33a6253b82a0a39f4f6f81fd66eebf439e0d0ec0bf26ce60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...