MAL-2025-187709 Malicious code in kronos-pipe-delphinus-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960c07082250d878b37b3a5f9a803c37008c32b0ac7d9deefdf8bc4284a2bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-computing-mira-volcanology-sublimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed13dadf05282b70bd7d95e5d68f12f1c859b52657077d68708f28f54eafe677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-postcss-europa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c0b587b82115b84377ead8bc9a56089abcc5377b44746e483ed6e69e89ec63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189952 Malicious code in toml-terser-webpack-plugin-process-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108235f2670a8c48b92eae1fda9fbf2849586da19df4677671f9ef5128bb5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fugugaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5557e429334ebffbd61a2f9be162cb4c79311caa44870f355fa7a42016a7d2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179696 Malicious code in kisut-faig-afiguffuib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4003e574c3185714f744fcd4534de0602db25a266ab690a79b8d1c8efe40ba31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-moil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de87b23b4c3e0c83c440fb9a6000005123ff2a2cbb2a9df75a8d556c609f86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173457 Malicious code in buta-fippoa-inaoufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee170236a8c4d3ffff13661a55f2287f4ae6740c217a1741930bc6ad28d1241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176845 Malicious code in nuilva-dare-ogoadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57deae5406e84cbe012103109d05b087c3dcd884518a3d67acd67809a17a6539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173546 Malicious code in butahu-asfui-dufusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e56da7337ef02be8636e56dda21f65d515cd5b1a094ef547fd4d7f341a0d8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gbfafafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834df2bb9ad54d90bc3e4205de72db33bbc8bdca43ba021e25adceaf7b46a500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177704 Malicious code in polymer-afia-gofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5688a06c6effbbbb00503576ef5e100af7dca77c07f9b6756b6c69866982ae11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-lepaod-mata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff99b8c981ef7009f4e597520359b7dc7de4eed0745244f71dd6d88d2c0e9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophialopez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8752e72e5f7fec10aa637f3fcd78f1e634dd0ecebe3af8475ee28b7ca080f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a4fc831dc28981c0b1ea8d67aa057e6c1cfbacb08517c6239e1eb9304bce67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152165 Malicious code in akanabi-abia-babu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db61a70bee52f3c8825baafed778acea3e004ff3c6ade0d1236d8583481f40a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158280 Malicious code in lookingan-konami21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1238fa2723274c41bbe062d927bcefe6b7fd3d5b32aff330dff2fbbc3ed915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160829 Malicious code in muklis-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2612d0789bf6711b5c6a32a44a9ecc99ae2992fc85ed12c5786aa6b21360374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169322 Malicious code in trevora-lisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a03010579f7701606e5649ea2c9410e03764f39ce5ae787fb6f96a0db7681b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbin-nuyasfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af60e74b9dbaa2fbd7f84b436d4138a7015168628e196df1d1e3c66f514a5e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...