MAL-2025-151817 Malicious code in aiboa-mioloipe-agat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17892c1e9703e9aba5c9ed6cf0b754f823ad760449900427152c7ef8a026e53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157209 Malicious code in jurss-sdd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b630226d079499eda35130407a40d0016b613cf98059bc31f62f3db7a2c598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160793 Malicious code in muklis-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabe63bbc37362478ccb8a8f71f9b5f2a8c9c4c02c9b9e3df603f7e6671e2932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157617 Malicious code in keyla-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ee9d2f711a4550e86541069a561ef5413c1074e5edacd8fbf5345408a4b886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155651 Malicious code in hafiz-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68127e681d4f1ab0e058e8d640213b9ec973d31969ab4fd8c2aa6ba0e72662e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-run-script-phoebe-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23563332488068001aab68f970057a006395d7bfff942c519c15225d01e2cb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-aurora-mensa-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314a9b30e500b1aa27850cd7078ace3a9ca58b62ef8ef1925f4b3e585475f6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141488 Malicious code in deimos-aurora-electron-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e10a38bcf028cceb598cc95ab3b984714b62224cdf73e92b6551b32bcfc448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-miranda-protractor-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a111ac67a7016d75f014c72b9786ce5661bc1d1508fb5ac8b3dff5ed5eb70e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-carpo-stop-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73fb28f30595738f9102c7e9d6150fe6f8e4e3776f6c4746ad2042242533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-aquarius-sagitta-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a2c5f0435131752da2bad4f7665defc92fab4cab7d0cfadf82a1fee411e6acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141603 Malicious code in despina-ora-jekyll-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b501de8f1360e66a72f590aaf705c1d3fcaa02d6de0c93e9334b191b2e1b00e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144590 Malicious code in lynx-csv-bunyan-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d80dac0922caa37c040c9a8061b3fcec592a3beafaef79f46568ce80e1d71e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-stream-fetch-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479f119c5107d1516e05ddb76327a4fd1f0c2d0d7b498d4f65b97ed857f87e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-bunyan-gravity-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eacda54269d846216b2965011da9338f715414b6ca27ff630368fe01ae84f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-postgres-dependencies-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71addd74e758be5d25bb8be52e25957c95a1b656fdc300b65271be507b432326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-private-hermes-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb0a2cdc40332b1e6809abb656db6f05e153274162f9f92a6830d8a94e085bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-ini-start-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4617475d964864836f5e94abaf991f558e3dedca1e65661637a22c5cb9e884be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-child-process-link-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22975fc0b1cef30e326d92c69dd05052e47b7277630c2b57b0dcf5e1986f379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...