Malicious code in sabua-muyaig-bufugabafit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5e5ec35c43dce9fd1a670eee78d10cc89e832cb88e5c45558e0e435825d8ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151529 Malicious code in abu-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cde30b60c7ed99438d9117ef4e8e6768b815fa0693730dd8ddc46f414edaaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152025 Malicious code in air-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f518d98960aa186c1c9dcaaca05fa47ad8ca3e1c6ed5a416d26616874d0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151800 Malicious code in aiboa-miolipe-agatamuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6ba077367e9507321b9d8dc991381f8e3c4c070fe78e49884fdafd0979b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157306 Malicious code in kamasada-nuati-vesa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3cb03a644f203cd46dda04be7ec612544cabceba444c4941354dfc0dd7ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8fabae9ca47f618c8d07d277b3b84fb48e6e5b54fdc0d4269543bbca9c6f9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159208 Malicious code in makan-aiuga-fiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd7ee6808091da803510602cfc842dbfe7535101afd4f5a0646fc5ad23b649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169154 Malicious code in trevora-cir102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b17ede89ba3a457a0e5602e7cb00cd60f7fdabfd77daffe70f7db89ce6ff9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kamoi-ailasaloiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd7873bd3fbc49706d0181c9c5b0ee66571fed10391b82d2710dec64eb528c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112854

Malicious code in helmet-native-quito-capella npm...

Malicious code in charon-lint-envconfig-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6900600a2f703e91fffd3e91cbfe8399ad28bfb5056b5c9925357edbde21f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-antares-hydra-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4eed890ae6762a203cd1c723509b3f4c0d85ab699e8529f69ff62267e9489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143785 Malicious code in jabbah-nuxtjs-spica-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c6404a455bb29d3f9893290050e6e8982e6a5dbc7c9429a4f25827345da287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145511 Malicious code in node-config-jasmine-sass-loader-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71be3c59e0dfe748e4027f1079b928a11014eb9ed0dd0db124e3b57c425b16d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145257 Malicious code in mysql-optimize-css-assets-webpack-plugin-castor-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550ccf08e3abaf7c172df12d438802d720d26d8c19209ea20c654059b77bd0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141008 Malicious code in concurrently-koa-jupiter-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c406a48340215dfc297931ea310432a4f8af4887c0ac52bb24dc2a6d0c56388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142366 Malicious code in express-ariel-antares-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0274a45306399efeb99751314c5ad798fca3103e6af6cba51a2b547aa320a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144714 Malicious code in markdown-prompts-pegasus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dda1fab30f9cdb224c6c52023b756f44b91b0d21d4e6f6436b9b8fe36f7b7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140303 Malicious code in callback-package-apollo-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629e16768c84e6856bf6028a33cbfb8789a89d5023aad21cb7224dddd26e1eb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139264 Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...