MAL-2025-188002 Malicious code in metabolomics-cross-env-antares-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416c9d07d4bfcbc0f380096b82f6ae758880a86c41a1d9264e1b732e0772a9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permission-big-omega-alert-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becde5edddf85b8ab06be7625942764cc139abc1be9d4826b8cc709bcad57c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188307 Malicious code in node-config-lynx-cressida-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a8390d9b4f7f0ca066259c5d2fb5a70e40e66cc7525724d3aadbfe0acf5fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189304 Malicious code in sadr-janus-apex-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59c744fb77a2ce736381b7ec08f3cd0b18a638bc3d4bbd5ef4848fb1e89dde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a266b60094c2c1e7cec6f1156328ed576850b7dab91e91b515a5cf4fcd2e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184945 Malicious code in sonic-kas-ahagaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e963b745373517f1911a3d9040e5a472163584d4208e21d2839ce92a8a55e700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamair-taqibog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ec2498a2bb189134d9b5fd90ddc9b205b62625febc4988889e1a6e8592f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174446 Malicious code in goodain-nusafaia-nsafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4485c7a870509f21e61d07661df823ac4b4f50a53f40367563a552d97a46dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178681 Malicious code in sgoodaini-sanuga-nutaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd88c25038aa70cfcb721d1d02d85fa57ad84c6091d441981a518ea14bcb025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5fd5e641aa2a5258858d186388e568713d2887349a5dd9dc0197eace5bca64d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153261 Malicious code in avminasah-agaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a176609799de4183d419674a06221b012f3fd982aba2092c296a100731a0e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wbzosv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6079407970edfd743586fa42039edb4ba0c306513ecd180c4be60e22535458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-araui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278618a73a8dd0d6d8e5afdf7ac3fa632200f9e3ff3cafafa2cdadc2c933981f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofisuoafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781d420bf8383e3e433df55166ffc8526523be67b23651e54ae3a972a1ca607a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158806 Malicious code in lookingan-namala9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c938b9eda5badc76372de53635dd52617e517ee9c92722eb476748b31ccf3fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166641 Malicious code in syahmuda-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6505914a4500542270838d5bed27afe56936cc2abe55fdacff91505335274964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160522 Malicious code in miracle-doki-uikayanabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6418f095d020e4bb8935165e54c949e69256b8ae5af89dfd65271aafc915119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168304 Malicious code in tealove-darknest46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b2eca03fbda28c9c80ff19de4990ada10bdcb623fd9f60144a093688a53ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143921 Malicious code in jest-electron-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afc2c02941b782a02116d029cc9e08d731431e5460f9652b303b188bbed9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145726 Malicious code in oauth-dorado-gacrux-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717df737b264bcfe501c344b361782b8805db7032ba93e9e1a2a7bab4dafada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...