MAL-2025-189937 Malicious code in titan-enceladus-release-it-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b123ab38f29699bcdc0dfef304058802d5bfa2d7b1952c1713eb14e5acad22fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187682 Malicious code in key-kernel-transpile-test-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a484d28ce1ebc6b67317bba20eae6af92f4599233593aaa92ff14e137a0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-geochemistry-sqlite-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a4f28aa9524d563787af9035f4a58546934a5936e381248bff651323b64c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-webpack-nodejs-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d388bde9d4e260b9a344967865578a95635996ada4aee337f32116385eb627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-odin-redis-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb2c6e623c7d9e32f8ec2d22c12a773727da425828e927da38a134bd8f8e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190469 Malicious code in zephyr-prettier-sequelize-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f33cc7656a725e03d077a064f3e7e9e32e71a10d7fff8cb27b483865200522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186039 Malicious code in catch-float-cluster-assert-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef58c9f874c23e8a9b27a97cbc7a46fbcce68e4f6bba08731fce9b4108467a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644ffef31d064f7c8f8da47da02f49d6bf25921d56bf6926069cb7d1a319c9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f656f467fae61c47e54da832eb593a4f58ef6bbdc9141ec22cbdf752d08a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadeddfaaef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eaa73a67b443faf4a7497f19231e16251c731c35a620fd7c22af2676d2b5d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185133 Malicious code in sonic-kulig-tgacov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a94bf9d334e9b17385a5adade4794b16b1e455749ee9c25bc0cdbd6e206dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-caa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c127a11669a72e4ec413d0f32f1ff12a72da3a3786e715d2ca768512456b990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in msokidt-avog-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92731012b6a34346fc5ad405c663f2489fd978af459d770f6d3303f64bda6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181939 Malicious code in flights-ilutg-iduhisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b31c70d46bd76f0e997e469790865ebf9ac8591572d39048e0d42685af3299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181822 Malicious code in avangs-olims-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3df62744d845f27f36c1f2021566483b119f0a95cffc5673b84f7387e01e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggadatusafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e86f997fa8810cfddb0a642c421dec94fe2ba3d97e6b36c662d553eee7df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b98bd63ce5f1b309d6782183d3b539fe56d3f12ddb6441ecd48dc1a7de2c82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183809 Malicious code in masolv-avlo-civbusasoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fcc5ae81e9e1c5557f7fb535b492aa61c7813883fb8d17c7725c44bfa238c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinuugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1779a1e35ab760e13dd55ccd679c85626120eb231dd87425987949f17c8628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183757 Malicious code in manu-oyi-gioafisiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a466f743cf2fe8c585c946deeb186f9490d36486852cb535dd5acecd953a764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...