MAL-2025-187442 Malicious code in impulse-dependencies-spinner-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1c5ba732a67d3f66094e9fb848726d7544d82bb0de3c82c8ad2e54e6932cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrusyyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190ee04c33090a3cc7210a782cce1d6a8850c11e6ef4e0211fa87201e03bacee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6be30fbda6ac81bf93ec7242341aba4a30d795b5b784f5f87e6f417f1dcbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafgsjffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedbcbb5735505c001f0e4c8894d166552efac4b41d2ddc22633202f78d26f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173486 Malicious code in buta-fs0boina-ifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bc94b7cbc11cab9cc9d34e9654b28f148429de99f92624de3b070923e20456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176929 Malicious code in nurai-sutaif-danbuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d63e48c52b9b2620187cfe69dd0124349737321fc9f5baf4df974cad51b432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e86fd22a2bde0c583ebcfecfb78a356056be75588edef964568d1641111cabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970d77c7ba1c85fd8338d27236a2708a4397aca9d49dd03db38a83532c03dbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbc7d69ed0fd62918ff6a79f463ee0f399215bfd43736516902fd225b7d959e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155929 Malicious code in ican-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90a16c850a6e0a77dd1fcbca2498772f1c66575fa14926e719b81d4652aad03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150160 Malicious code in @mipta1/miwsads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd67e95ffe5d080ab223610802562bae6007190dd47116e1f68f59abd296f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167467 Malicious code in teagood-nalikami65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af1dbf30cbd8abf196282fd96b82d596c6ebf61b12786bc32df2e0d0a1e2e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-dynamo-mongodb-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed148be798a96b98836a631013135b1e6c442560a85390172b4c430c0b27fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-uglify-js-ophiuchus-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3763d689299b26c905a36ddfa3ea5740c798a3ebbf3ae26b8f4a1e4150c295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-backend-antares-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcdbeb5f3f8404e93c29ffd571f029c12b4afe279214521372044e00e6e2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-optimize-css-assets-webpack-plugin-request-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f976666400c8581d9105dfe0fb7da5ae6fb7131a6b527569a93b206d34a4c7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-schema-blaze-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13557f302c015eef445b04257dbb25a80d80434549869866fa18e85a650292c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143334 Malicious code in hermes-xml-auth0-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c611aff8a4e335a1a4820c2a72eac66c8e27637a83e7aa8e9fa29618dfaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-buburayam3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef06f4eee60f0d0d01113cdacd90484c29dec4eb791bd0e858098c99c4052bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...