MAL-2025-188609 Malicious code in pegasus-xo-charon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181224c30ecd7ac564d8ca1c19e9898a3d4893ef3135055451b9a6683c264f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-subscription-quito-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5366b5b7b684a3e273fd85e0ab2aaaf8b1272bc3ab21fb5c112c75452dccd5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adifaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7acb1f2c077462f532cc5d4c171f3623da9cfe70dd90366f196d2a707f8985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-diuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2a7c6fc6183aa7f09197d567126e5cc9c2323d4f1173ad451b08a732200189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-budehi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c8ac4b09a83df2a049df1851308c3a6fc860b61b0772e776d166df5ead3056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-alif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd79da6d8a2fb9d762563b686dd3fed4502f24f3797a058c133eff33a912e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177861 Malicious code in polymer-avof-ahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd96b39fc6ffbf803a105f58fc4e2816b5ea97b3e39ae5e3ef956a9887f19de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179371 Malicious code in unimuna-safiagiaf-cuagaifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020c2e323a05aee08a868967248ea52856c2aa37efe821d5a70bf7a45ecf0be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5e0e43b9b4153ba214d06e01a54717dc8127ca7a763f82bfabbadd2bf4a2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-miolipe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3900aa3c9a322e9e70ab74b3fbc269604433f8b0e28da54c501b6420541230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155364 Malicious code in guras-asia-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5294e2dc00136de019b5cf2715baec3828307c4d8dc114c3070df97a2bce188a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusata-buajdiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfcfe4cc27996298bc6fcfcc9713864cfb52a1e72e2a6e7e0325e4ef897a1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-kastra-webpack-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da31a94dea166f9732544d8bc74d15fb23b8b8d49f3dcd8465de86a7b8ba7022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145865 Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa5e7c9dc3d753d65b3a92dae95e45ef42619f35d4b3c87f3f5db8bc96069e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144773 Malicious code in mdx-radiant-sagitta-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c84a0ab09a6df815a8eecabcebbc28db9b5288ca23e5fa3780ee9e790461910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137387 Malicious code in tomi-soto38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e347f3f4ae637b82f7560ff8860ae9194801f61430852effea424a2c64ff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-kembang21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd8f14fd2f4c32159a257d74ac1e85a9309082de50f664b1973ff7fa25f1a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-teh55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f647f23a015b754f54d48a1a102432be3a0c27c34921d8534d2e6a948fc68ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135714 Malicious code in nana-brongkos25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ca921c0ed3b124a7ad326f458771d784989558f40ffbf51fd95a78ab7a9988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132095 Malicious code in arif-kue53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b3f153c8aeb20fac848f8e84a28f8365ef875ab725150a01f9f4eda076c94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...