MAL-2025-189310 Malicious code in sagitta-antares-winston-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddd0b309f243a59e5c481a498f75eb1c403e12809499a7c5b5fee2a091da4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-asthenosphere-callback-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a2d722d630c36391a6462a8aa7ec39781063cf28bea9b925ad28d6e43bd231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-winston-neptune-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565a47c433c4528bb7ca882f19a72714292b446d620d3c6037f544a29bda1783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186352 Malicious code in cosmogenic-polaris-helios-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e6d3451b4d5f0da4f77046ec49acbcbb8bd9dd42f04cc2a46ade4250da3b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-daliunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf9e3c4e090244c0d18b8ff7fa50a09c5f1bf94e05c6f189dac63851f0dcc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fehjify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941642d69d5979455a40ecc361c3b11f9d386929ab443e77039430e4c9ffef61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3637c4e46d4c374c0cc7aecc344a8bb57e219a8b36741dd8cac2d9a8251d629c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisasioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64449c07366674504895aa2987a3546e7278caf5847eff47635d1a5e27ce1115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183326 Malicious code in libc-ug-aguagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e559eb97c28fe0a50eced0bd7920844a7e79e055459340ef72ca941eaebdd4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184427 Malicious code in modiov-kilan-avumangafaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee476e010963eec4612fc86f9b191bd9f06e4c3b7d361ac10ff6ea920ba7a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182459 Malicious code in imodiov-kufni-cocakma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dcd5294a15426b42149fd0b96a4e1230abc1d472d1f1c869a1daf3e3a9c9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaompmng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c35e0d7bc4c8e917113abd332d4e1230e14ec68baf57a4a1a3b0bca8b4d8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacamuvaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4923ec8af451965580b87442e25410fa7c291de5a953ff06e11abc8f9165a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gii1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf1317c7ac27d90e4bc5a1edce430c8ced6b957ae25f49e571c9809b4185a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181837 Malicious code in avangs-olioms-nolisf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31624230ab762945a6dec8cc424141c7e9c5dea7f79281a69a8e8c8f06b22e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184842 Malicious code in poliaoz-alai-ava0ubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e8c24e6157166762c93e9abf8d00423a21f73d462b1c4ff370e3091784b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181335 Malicious code in @akunsansan0/susu10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1a7efe930f70a9cc305bb5bcb6b2964d3a3ea17922ab0e845b81e55fce3456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-lele (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8641f3d93f128d9ae330a587f56b8fd4d20f7c60f482c491c98c8b0a19e12742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180023 Malicious code in lookingan-nanakila94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71df6aefe5a147656876da127dee625d7c31b8fa1ce391b5d5bef261780d2951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafifagfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37cc17f21dd6aa364b9b530ac4bea1955992ef52d0fb7b7bf34c7eeb8d1382e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...