MAL-2025-187265 Malicious code in halley-blueshift-sagitta-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1c5d6bfc2336eb699ded75fe930e0258ccd2156247cc13cfc2dc4064e9612d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-sails-tethys-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9f1f7e5c6b1321a8419f9234c803b8bb420665ce0d19a09ced27ba87b7fd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180038 Malicious code in teate-thy-py-bame (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3543b1b222868be606290b80dbc1e622db802354482ea07066cb47449e9608d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sufanifufi-cagfifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b02e007166faf899d8e14a271b937ce3cbccf762a941dc1624eaf3de4aab4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178004 Malicious code in polymer-gisgsgghab-agagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c12975a1a185257995b0ad0b81687110cf8335a6abfcef3db9245e5ef73fa37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172421 Malicious code in heres-matinula-uinayam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9c8e1ae7c073fe5b8004c11837d1d520129a43a1ff904bb20426f67dfbff2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/afyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dc1d2f3a3e634577b9a63819efcd96b60f5f05898aa906141dcb557ae6a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipie-aramsmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb048d4db6a8e9912acbd1d3e0eeb77019e0878e8d3f39ae1bdf0a9f131ee83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150126 Malicious code in @mipta1/miesseyfeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8875e43c57377ff5dea663264a88d8f53b06e6e795af14b4917812550dbb4335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156608 Malicious code in inufgi-goa-jamufgaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de94ab69bc2485eb74dc7f417d6eb9ec7b70f79d3b5b667adf7719635d986a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150016 Malicious code in @mipta1/ewrauja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f7f2c921e27ac43a1fb96cab7ac86f6971169e611e21c92684ad1e913065a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9cc14734dae5d74223bed65688ef160c961ba1608a3a1c68e6ae3edab2d878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161183 Malicious code in mutus-manis-nauatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf17e8a7fed622c3ab29a7640bddfa31e269ff308824660981df1d383b28535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164489 Malicious code in polymeria-buter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fba03c7ad4e5e664e408903479bb6507aae808589a506260ae4c75a7570c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-miu-sufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c69334d4b2b73a5ee6ad476b7d01abdefa20d2f96025236a5739a31e41b0cf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167958 Malicious code in teagood-yakuna94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a5bab21a8e602f5f94ad882ec4d4259bb66ff55324d32e09d0618eefb4b24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-scripts-gridsome-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6e9f83f68193644d7a1ca433c0ba23ca7f0845e667969d027039193d7adc21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-flare-meissa-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e1be5e5c6b272a1cfbef32ed49dd078bfc10a5a9e23a99c657720858a1a921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-eris-dactyl-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865d86200141200e19333c3c6c36f287645c7e973eb4855b695238d60e910168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-inquirer-lyra-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4535af8d9a3c92a06b452d941a13df4a198e47bc1d6483cf895bc8971bdd575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...