MAL-2025-189888 Malicious code in test-slides-bellatrix-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba71d4110a671fcb6d0cda97d9dc561e75c7fb386b29b0f7f2867f6d222056b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185906 Malicious code in brane-halley-solarnebula-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbe993ab0d2060aad81f817e0d23ae578985071a1a988c2fa1c1cd10c224534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187092 Malicious code in gamma-integer-hash-double-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68843289b91c66d58ea6949f006e97f32e4b097feb47c1b22cf3d57e75c7050a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188591 Malicious code in pavo-xenon-markdownlint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b73f8ab6723aec7e50b5b9f873fb31ab31825f1fdaa756acdefbadc5f96ca02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiufcagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad9d9361497b4323311ac1d1771cb0def3393b7053afebaad76e413f927f053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183060 Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneamuca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc89cb972dcbbfecc2f2ce50264df84e9a400f612bf72372329b891cbbafea52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumajiausubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7acca2e524d32626d2fc84ea7b162a842d20f4683996132407e7a05c6e59af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182605 Malicious code in imugay-avig-ijimaumfagfaatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe34cfe19327d5b48e1d9dc314b437e9def5e98003cd0b5a129776329fef471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184325 Malicious code in modiov-kifni-ufbaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff31d31551cd8e922fa0afda1195d08b39c347a7b6ceba7cf3377e8a49d0c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182029 Malicious code in flights-lutuig-alakanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6936b8052325db59c912e24168c88ad2818b302b2420266387acad58d292d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafasi-vaindas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17be7a9513639764637612032ace81fed15fb67e7ac47a2f738efb4ef0878e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-matanidaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75bd590dad1e72495815b32aef0bf29b27b7bdfa36c82331d30b78a30d084c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170939 Malicious code in ayoubmacaron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fce74faa7dc2f5fc5d95661a3fbfc12706bd07170de1e3d34b5187782146bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in idreesameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915700582f587041b5d7f9f798e4129744e78957f7d83b98e22658253b70c62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soadaf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55dc4acc6d7f44216884e8516dfac0ce381b8ef0b06009ef94da2c3280b76e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162085 Malicious code in nokiragne-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bafaeed32e094d85619cc5a6f88e8b8dafa7e240451e47d8535b2dbbe46275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2ce0323d02ed57be30a15534d97fdb1fc98120373437caf05773ff6cb73e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-mira-winston-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c23a78a815cdcdc0f318e8ec01bf642638a7543a0d29202b96f07209df1b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-vortex-lint-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9266b166c4dea6a6abc04e078f1ea3067f96d87b4a0526a0e99ac96c7fe4705f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...