MAL-2025-189516 Malicious code in sirius-lynx-antares-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1b1189742e5aae02454df7ad46c469deecbe1d18ea01b1feb3d6b00b7c548d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187065 Malicious code in fusion-inflation-dactyl-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd7df62b134bcc7afb6138cd72c0148fe9828de23d7012fa0e5c0c2047e9063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188454 Malicious code in optimize-double-nu-cluster-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b98723aa7741d128b3d9fe5fff42be8f635f757b1c6bf032d86eed998a8200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9d31b6b44cd7a6ce31d19da5a708e1969b15df3b09ebc18d3e2096591188cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafujihajdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7943cc25ab24b06124f12cced09a3542f6f1ce8e7d59911d53fa4c71e625e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iyucauaugayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af798a49acfbec711a8c251258a928efe8534b8bef6555cd8084b3b5d6920fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182634 Malicious code in imugiay-ajvog-dnieamnfaiyugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fa6fe12bf45d08c1a825d80d1c1c4d52076a0f8e8e34d998efaf752555eba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184708 Malicious code in oloc-uyg-ugoofifaihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3edbc90192c3fc23c1f38e49a6d218898536bef10dbb09d384cd2e49598583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181322 Malicious code in @akunsansan0/kopi7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7eaed3db39f2fc856bc9218384fd4cfcfd57e8b3cd073cca57f7908717f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181315 Malicious code in @akunsansan0/karedok7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fd9b90faf8d6a67084c0ab4b071fc1765164ce0dd92dd2aba7d5a554243583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ef7099934664f2f7d9e796e12195ebc566a2ddc5696b5a885893518700dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180248 Malicious code in teate-thy-sonic-cici (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53508e245c73c8abbe60b0ce3127b07f93c3583034ef88cc871b4e1dd7ea13a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179751 Malicious code in kiut-acg-aveudcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3252c38762f7a0b08b029a39c8ed186b809b341bafb2f8352c455bca363a590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsa-darifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a15a55b7c99fc265758effa9cbc09dd2b71e5d31b86373c539c525adcbf057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff1cad525eaac9e84e01f34831802bdb0387c108e2f16eecac2250cac5a1318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-davataihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfd4520a1da95b8ef50a573df4035307e57006b762b0c92e571f5c89779976d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098a61717c948a47e34c62e13288cb44260fb68bd2f516decd904734b799b91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-fvunda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9b9acceb1e86babefd0679b1e5729dff69c7cf595e90b3207de8bee097af2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8f1c7270838a6c6e3579b930789c327ed75c034e6058361d977bd5e837d276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutif-dagibauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81039045ba1430c458923acdcdc89bc199b2587733d2d96d65bc37863ae5439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...