MAL-2025-151800 Malicious code in aiboa-miolipe-agatamuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6ba077367e9507321b9d8dc991381f8e3c4c070fe78e49884fdafd0979b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159208 Malicious code in makan-aiuga-fiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd7ee6808091da803510602cfc842dbfe7535101afd4f5a0646fc5ad23b649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d0b16213f371dc04435b420517124c25d8d2282a6b11d60125e9d2dadec61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nufat-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba72f72e3b042562c88bb5fcc1697c6daa8609a02d5d74b43b36f4c2502bb6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152025 Malicious code in air-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f518d98960aa186c1c9dcaaca05fa47ad8ca3e1c6ed5a416d26616874d0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166246 Malicious code in sunden-diak-itarukinyuia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b421830c2c3a95d2aff12ae248b60e946cb8336699fdbcf25fe059bd62e7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167606 Malicious code in teagood-nalikoli50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca6786f536c924fb212b73eb379d5ca8e38214339455fe44535133b8c466863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169452 Malicious code in uafagarug-musafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9653e6b73518f425c6f27153e32f9bb6ee6e0b261450466c8bc22246f6270e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofogi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e031f15741006ec9e3e566635cf06b8a2017af37b82d81ed54c817e7f2652e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbb782b66757afadc258ea55ab51ed6febb8075e62a6bacc0b81692efb8b6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159764 Malicious code in mansila-iala-maonldauai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368e5fc3daf142e244a356cf2b0818145e6c585647e682c70b26d4547feaa70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156497 Malicious code in infi-gafob-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b3b6aa02cb61c4b69445182762e7a2605243cd5c507b0ad575f266bf7c1465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161089 Malicious code in mutaus-manis-nubliw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659a3e885e158cd2ddf4b486010e415fa703bfc042c701b952d1816f44397c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-pegasus-ceres-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cce7f7f73b27d1ed49505cebba1b4895214e8d3f89254d23015ae6620fd55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112854

Malicious code in helmet-native-quito-capella npm...

Malicious code in equinox-meissa-europa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971426dab5e1c8b4d75b97a1da56d0a5d22b1e299d60a76669042d42416a363e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-taurus-achernar-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50c4cc6027074757c03a706abdd29d05f5adc28296556b0a8cff59c1b16c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-lint-envconfig-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6900600a2f703e91fffd3e91cbfe8399ad28bfb5056b5c9925357edbde21f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140303 Malicious code in callback-package-apollo-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629e16768c84e6856bf6028a33cbfb8789a89d5023aad21cb7224dddd26e1eb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147230 Malicious code in release-it-phoenix-node-sass-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252b6058a3bc8d31180d451e6fdd6db27a4b8de5be62ce3bf854ce7cb5599181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...