MAL-2025-187718 Malicious code in lacerta-ceres-jwt-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9ef158e3d8954448aae52a5a567e27d1ce378b34dfd354ba3f163720c80229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188118 Malicious code in monitor-data-uglify-compress-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fc316f02dce0d561bf90ab32d3702a34a86ddd60eb81d8893367f9b0125e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186813 Malicious code in eridanus-rigel-cosmiconfig-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367e03f99fa45940cb2771bc5f275a6625ac0d29e63321cdb1e470b444e8df44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190265 Malicious code in webdriver-manager-sociobiology-wezen-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48d3c0fd20375f6fc9ae730c7410d98f76bba902c31d24ab749f3bd628ff98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alonalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d5873f87421804115b4fc4009dc6edb7c0f2473984e83aa7f1185676a2824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-ibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8886969fc314844b26c10a28cae35540dc9a0ebc37a51f19fb19e584cd33ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ce66689fc6613776d0a7f0fadf7d384969759679217eda930b7fb1e7d45adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisnuosgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3476a6e1edfeb83422f7c6633f9c6ad49cdca6f6df1fd0035f16af7e4860b4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-giossiosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b439362f1dab8f502bc68f9343a51dd556ac3ddbb44a4cf0d3c9f0e66b801764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183371 Malicious code in lobac-ub-afu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b743762e0d76c300c0271597409ff49b03980a80296c853323e93244839899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183029 Malicious code in itale-dci-rshayt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67f9aee887cf6bb9f546f0445f1c7cd84d4f2bf8577db5ba7fd81005890fc98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183461 Malicious code in lobac-ubg-abufae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4274f8bf5f64ac2fdcfa5b9358ffe6931dae6fe32dee56e69f06103111840b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181737 Malicious code in avangi-oa-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89999e7964af437b190544463afd312a036f433ac216060b40b8973623b2a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183676 Malicious code in manu-oi-gisiaso1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f8a9c63f2cb4e402a924766172f0ba5f3adcf2f6034c257680c99f1d981af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183071 Malicious code in item-at-labieagyoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9fb1e7ab2cc9e20b4a6033aa2633fa007ed4ad680e086fc29bec9338d4b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182755 Malicious code in indea-fodij-agafaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb446a20f0c17cf06cd01f4ef86fd758b638806e168985fe5948675190195016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-giso1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e940c41767ec424f4b222f4a04d5c377d616f0cc66c0b9234d11e0ef55213b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihoan-afmcautr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1fe39378db0c48bf6c5470cb84161c8a8d5835e25868b376bd60174d3462bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olika-tabao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c507594cf3f7aa66f89ef22f67f61eabeb449b035ad2a26de3dea4c85395ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuygbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc14d5a18ddcdf6db49ad6e8fff085af20cca43075face3ac2c3015bec7b4241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...