MAL-2025-188695 Malicious code in pi-emulate-lambda-alert-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236bb810d2fe074699de9d6eaf3ef0198b4b49689dc232910649ad3d8f66b4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185618 Malicious code in async-eta-try-balance-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ce88a7db07011ebd02f6deb6abe9ec27e30f28d503c3580ab35c829a94c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186924 Malicious code in export-resolve-theta-slow-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a82e294ea324bca472096d25a02a11bb79c13ed4c1729e7d4735c3cf05ccf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189163 Malicious code in release-it-indus-promise-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26390b2e466ad38565abbe4463e6ef01196106534541f9ba58e2d1c0c397248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-lepton-interstellarmedium-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5b0751525d924128f7d8f3f75bc81175d9c822a4d589dc97dbc03ddd75c01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189985 Malicious code in transport-postcss-loader-terser-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631fd17e74b28d64566d646ce664486a32476490f54ff15c546111e8e1fc9db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7611af03877b6e5c389e7a7804f68ef7ed64c73b3d132fb06350cf7ae2d0675b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276b04782d149811dc9305d2ecfbd7c083261dd68276b4e37f93efdb1c8a0d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaibafuiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f7d88231dd9abba69a97148009280d1cb468d9beb93f2580204aeb6d762e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaiofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abfbf37a70f764b47d94fb7ac89fabb2b12abc560af25139885ff4c645235f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c441cae081164986b992f7c25c7d16ce7576c0a3e227d3a06a5abcda6209187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idlisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddffe8a09899201dad1445250f5ce219c09c9b0576f3a245c697e122832bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315906dd4c81266b4b476d40d475a471d83bc7723d47d7f156a29ca9331735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daiajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a26cb06add0f09e8cb8198d029d2c5768028fdd2b6f15541451e87d87afe3bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b427b11f1a5042a0f7f3706216c64c30212178ac1a06c84018a458fa65bd272b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaguaguaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81abfb7e9bdee0d24cd2137f6afb9a43644bff9f2bf4588bb03ec11f8a7956f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf61fb7dc198e99dcfad7398e2fe8e5b748cea89f56f4a2413181ea83b4d3040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-uig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65447f6691e26b866e5e8ddda0c09a7aadbb4db6d1f61629897688696800a936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihn-afbaufcaducxabnyvacmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e7abd477d3c6a07845b0ddd72b0c13e7cf4c802de3e1c037fefdb962801ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010d052d1f964d1b945de8e4ee57352789d706cacda8215ec1c27430060a0c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...