MAL-2025-188209 Malicious code in nebula-polaris-prettier-wormhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fe8eef18acaa2546443d8c4b2a939c3b43ae4549f2ae57d08994c602ff3ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185628 Malicious code in async-public-eslint-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8260827b01d06f49fa980d26d357da964681809e032e0c1e4ea86afb5a6ad66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190284 Malicious code in webdriverio-umbriel-sequelize-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367388f26f8901408f98dabc1ad28b7b62064486fc25c56a4c1d0405469cb2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190328 Malicious code in winston-adonis-dotenv-parse-variables-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f796a64813b30c1c12b1198d74b70b219329a69f9abb0697a70bb9cde818dc7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184426 Malicious code in modiov-kilan-avumanfaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0193fa5b27956614ea7deea4443848d080d23fe6480a9dc3663759267c510d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduhisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b31c70d46bd76f0e997e469790865ebf9ac8591572d39048e0d42685af3299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e42b51d885eb914d63a3cd8c4420754611482c9140ec7d0ad58f939701cc25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183835 Malicious code in masolv-ilo-cvaginahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff28b98af7ac7a673d80d5a2d5ec49dd7051c1c277ec7a387cd668081d21cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183640 Malicious code in mahnu-noy-gitsogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5e7e4abaa93bf15bca06857d17ded1ead747ad733b68d361eddac437bfd95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gafufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c27e8dfdd75fda48b9cef91946d865c73f5c24de991abd12ab8ea9050d5af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37227faef04f109d8d7ea10d274503d937ede9f361b00722bfb76df38f5b01ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185214 Malicious code in sonic-os-fusiaadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2784c2073485ae2b5cd89d5d067d23f8d93fdb0fb44818f97b557ba7cde626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179937 Malicious code in lookingan-nanakila120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e4f19be8bdef8d85135022dfbb8d785e27d9471f3cd89d51f873e9be23f96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180529 Malicious code in teate-thy-sonic-iwetob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212a48f0ba0d1f4699ebdb517f45ef598f35e9987232b890a702802c931873bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181059 Malicious code in teate-thy-sonic-voswab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f61512aac3d738995c492c73081860060a6e8d6c4c9d05eb3e3457bfe6a1d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-imri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7ae8b8550c8e0edc06f23fdf4a90233493c3e6dd38745e1fa78616541576ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180449 Malicious code in teate-thy-sonic-gutaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa8fa713f088cc3b663ff0d9c601a4d23f28156feb8c10246dc03f926f865eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ekwut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e897386d4d188e2625688ac40be3c20fc2022538945e9d0aff39ed612eeae984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180186 Malicious code in teate-thy-sonic-bazer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e58ed8f9415ccd9b15cbaee3f16790b39d1557099a06304e41cdc4cec7cf6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179483 Malicious code in anabuyil-inanhu-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0631d72fed46cdb91ad5762151f9b9c07a819a6f1faaabfdfd54f69709bea34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...