MAL-2025-189292 Malicious code in run-script-sagitta-pulsar-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301093ba1f19945b67f4a51c33b12c18edddc6ceb26f3c8bcb80daa80505b50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186662 Malicious code in dysonswarm-loop-command-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1019e8fa74570eaa1b22a674d4869fc6cdd1fed122f53267d55d7dbaa65146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189877 Malicious code in terser-webpack-plugin-rollup-plugin-cybernetics-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b7843b7f7891a049059218853ee6c6a14322926fe06a83bd6cb691a16048b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186924 Malicious code in export-resolve-theta-slow-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a82e294ea324bca472096d25a02a11bb79c13ed4c1729e7d4735c3cf05ccf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokinla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc1caaffaa703e8ed12234777254d1e5ef7da42e9430f7076e145f20b08d810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafiasoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0348e750a93c20654c0fbb6e5eabdaa7814341176adb473e55e206393df7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avumangaffgaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cf83fb84ea3b88e625e69db2874741e8d30ad301b43972497467b367d80396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8fee0f43cb1470f3bd1210d847a9bffef9ed3fac3691ed77d4a0e5160e544ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185307 Malicious code in tunis-kt-gabisayufsgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a5d9c9f5be78400731cffa242058185c920c525f1f82992d62ba53630318c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181786 Malicious code in avangi-oliutka-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1cd789fdf2dce8dc36fcd6469de70278543ad1ade939b1dda4394de69ad720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182382 Malicious code in imodiov-kufi-coi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c83fee882ad91a35d4635b4ed411eded19fe7b8793c405dd5bff4fa6c92a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182855 Malicious code in itale-adci-ggpantekkkktololgybu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09053def6dcda811d9337dc4d28b9a83eac24c39ad8ae5e40d1e217de9b81040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184594 Malicious code in odasv-kiuu-bofafni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f0b7466dcc79b06f8df59c8efd66a112372ebbc034e0507cb5feb69dcbf40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182920 Malicious code in itale-adci-gnygyyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cf5e6263f7adc72f627f2796ce50de1a72dd474cbf5bc9d31d9ffde49f5928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183279 Malicious code in kisut-diug-danugamicfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233457f82c9d479ed4fc900a3acc9f618a5712b2be5486251f1285edde7760bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181943 Malicious code in flights-ilutg-idulabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2562a4832701f72844948fd44e2d8d5479f11eee193da1b3f824315042d0372a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihoan-afmcaunxabtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572d8fea313cb2ba4b64fb6dffa6c7a89a55a5ea34af253b602402a406039a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-ugafugaafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cbdc87e17957cb2da6cdfa02455e78867dfcfb2da5d92738465892c560b7e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-giimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f1c861a01e0064124ef91f6027ed3f42a19a2499bd487929a89bf829c3aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...