MAL-2025-186748 Malicious code in enif-blitz-selenium-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6263d90a50f469b364498e2b135964186baddc756040588a3c53724888fa7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188591 Malicious code in pavo-xenon-markdownlint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b73f8ab6723aec7e50b5b9f873fb31ab31825f1fdaa756acdefbadc5f96ca02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186317 Malicious code in cors-google-mocha-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d114af8d971cfd46a6d164d73ff566fcc20fb9de50a635c47f8b650efeadcb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185161 Malicious code in sonic-kuloig-timeseyaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a6308c15f251413654e01436e64a72a9ddeec67a68e276fe0cca2ac5c8aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179794 Malicious code in lookingan-jaja19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e279fc4271a337d66c24cb8b354b503797630895304fe0c5b348658f91d6a1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaiin-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad726613c8c6aeebaf06879b0a795bcd495858b5a3f1dd41cedd2de065961a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagha-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f98089c3319d7aec12578a4b8a0d5961b4ba4877edecf21698a62dafe0ac804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisoim-olosdsdsdgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067de673c58e47f7d111be7d02707b487948fa1ede58775b40f630705908a11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173814 Malicious code in digo-kaimi-aiokoalamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f998b5fca7e60589a2deb8e395f0e34a0f768949734cfec00afa4692ace05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171721 Malicious code in planetdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134fbd73786710048219e3c9e009f28690d5844029e5ca997eebd02766b60290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171912 Malicious code in spaceseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31595875ba7b87d38e691d5d2a7ed08f52bee356e01bf3a8cb5753c5814001eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vma-nuabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f509aa85993f0c427d74058c6226a437fcf26ac964f5ddba8e33e1cc026ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72dc7367e8279ce2f8f6150cd6fef82903b98343df9936a52adcd563e46a717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gssad-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3055e93838fbe7bb2d80f62c4fbc24a4ee028fdb3f808d44aea93c92f69d4e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161190 Malicious code in muy-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be034097eef67ec9fc7145850f4f54d4bee457730da4fe85ffc4489a014054a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4404c500213186ee9a02d63f4074cda69a5e90161960d2f7b5cfc470ed353a70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-bauta-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362e185e71e7832e6ca8388c79caf4f966e002ce3e61cd35c0c38f47c86138ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161169 Malicious code in mutrio-nduatd-mulidao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75eba0b957466d4fe549ed6a6125a118ec87f34a5d61873f6fc26c8e6941def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152566 Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159686 Malicious code in mans-manapa-nuyacdyad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02b8574cfab37cea7b8090fc2b43ddddcd5b940177dc76de038d110352551253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...