MAL-2026-2662 Malicious code in @automation-toolchain/f5-cloud-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfc189949f1db0cdc70361f74210d6fe3f92c3e69ddad9491d9c7615465f9c6 The package @automation-toolchain/f5-cloud-libs was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-186274 Malicious code in config-dactyl-foundation-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de4251893f8cf0b528c2444bc8aef33307f0241ae32247dcc74b1eb4c4353bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emulate-private-alpha-decompress-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a73cd7def8995cb1c4f464021cd52d52ea06de08bba825ef6747549710d415d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190092 Malicious code in upsilon-fast-epsilon-optimize-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d653fcaa0c2e1a74b8bf8126b95ed3b9284be21d307f766a0df8c77a468db28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fidugafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31895d889007f313fd65a71f9d2f57c8432967a51b39e0b211dcb43808561f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvaginanavcuovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6bf98234a510609d4842689c608b6d543b86189eac3a22cb717f9d16784f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-diuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2a7c6fc6183aa7f09197d567126e5cc9c2323d4f1173ad451b08a732200189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184360 Malicious code in modiov-kihan-afibanihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21eaa05a59d01c789b7a2eb32242cf746885f223945daf4ce7ab9dcd55fbfc23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fda9be59d767a6d0be4efce2f0bb291f9a72fbe2e5782e0bb800b69bfe37d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc159d1d03e8704f2eb85fa2d7bfdaecc9384fbf7fb4169accd8e9ae348244a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181207 Malicious code in @akunsansan0/biru21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1b3034bc98367d6acc47ffaa2994a7dccbf56491763f2bd4e75da60c14f990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179855 Malicious code in lookingan-jaja76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d146715bbed35fc0e95e3058f1b3548ec394fc91194790b3d9a9ce2a0d4491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180093 Malicious code in teate-thy-py-pikec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3094be494cdf540e296751bd02112b46c74f9bb763298776626e5c191938d4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061b42fb382f97228c62bc2815dc3ec410d63fcfca2dd328ee8b22e448f28aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176454 Malicious code in nokire-nakaoci14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7308c6d632ff6bb7446f8d7d5f43081cb3de2ce0dc0977a31d17a53e3cef9594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174583 Malicious code in haritono-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7a9a79985f90a362b0fc179a6a803ca752bac487f7d99f6f11899d31c2531c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176328 Malicious code in nokire-kaguya9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6733378d6380cd960569309a3d9fd1ebcbae00e46f838a750317524b59bfaec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176729 Malicious code in nuilva-buyavadia-manha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06797208793fc9670d607502c2204268a3756f94f5a329f3c85a283ac39faee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176692 Malicious code in nuilva-bavam-madivaunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd68a1b236d4543fdf58d005a5e6091d535f9ba0025959e8d3dc0568fced2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176847 Malicious code in nuilva-dare-ogofiggadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ab9a8eecef9fad754593c6a175899ff80ad6078b712cc0f69b523391199aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...