MAL-2025-187281 Malicious code in hash-authorize-sanitize-signal-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036f529790af1d972ea5481f35974ed1ddef51980d2dfd257f1206670838669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183418 Malicious code in lobac-ubb-avigifagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa24bfdee3f8a02480b5ccaf7e982daaf39abcd6b249a66fa66f35022b2a6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182564 Malicious code in imuay-avig-iayafucaamrfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549d38dadb8debbf857396418c5aca5f01952f57d846d21eef13181043b0c893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181747 Malicious code in avangi-ogolia-inualubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e2e44e7f5cfbee56d522da08697fade27491250de94613f8f6bdc9625e4829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-afaffag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1256a123bb81b7c94b4ea85834082f382a8cbe42378a1da235dcf0e78252b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-maan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c863a1a1c7b6b1966f8de1d458952561fbd96fac8b166d3029e28bc35bee64c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulaksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f814632638384ae48fd50a1eb490db70fa5d9b9651f4ce9fc09ca3eb27b504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161689 Malicious code in nabuf-otomian-dfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8d3bc081e499ded15b63fd70b5b80acfcbdf3b84614c761e1d82fffca4f3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151433 Malicious code in abina-mibiian-upmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36547600eae92429126e53ac613f191bc131def7b3eeb5cca253b6d3e18bfa40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-enceladus-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f303dc4fc3654d2483f1bdbe2bbcd9922173b5307487abd9154297d5ce82c078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-kinetic-mongodb-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbffb1173d5dcc002853b4ba9935cc827963528dfd53c8d8d7e443f7d17d8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-convict-nova-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52298d621a66fe7a0eb02409e2c6b190bcd68b50065d077d4702828ca83313ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142154 Malicious code in eridanus-registry-nightmare-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e598b5c68b81db1caac8bc9f7943296272cf21fefb75a73711750c94cb94c330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141857 Malicious code in eclipse-nightwatch-nashira-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed0de3858c18672b89b9bc94035d6db8bcf216c001f9385e80ea20767b99f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mendoan92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c442b862d3ee66a9fea09b726f36b66d67c219eb533692400d3580b396f2e5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127889 Malicious code in kiki-klentik87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218c5f78811882e9efc6c4172c18e764e1c43575550a6046af3b006507c9a88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-brengkes32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0778c50e1a3aa17ead1bae812f92a25f9e16b7974c505e7d077e70c3f209da85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f33e127fe41036ce7da0cdd2db27db8bd8b0a730f23febfc6f35c2cc8fd998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102927 Malicious code in friendly_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f78090bb482dd4c5999fb606a12cd194d80fa4aab39b5871e3f52712899b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-mangga91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbba206d805fb86a1687e25374bd2679b351247ec01c2c600c3edb2b05948bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...