MAL-2025-187201 Malicious code in got-lynx-greatfilter-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb1e5ae3602ba1d907e123d07c8bb75e62724ff1d8078775eb901682291c03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186216 Malicious code in comet-mutation-commitlint-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd2a460ca0073a03ed3c72112f9aa3039146098c9d9b9c319caad2451f7ab58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186776 Malicious code in envconfig-sociobiology-palynology-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07d790c19fec614a3fa7fce75301a2098fa1836a6636b282bd014f693c75c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189985 Malicious code in transport-postcss-loader-terser-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631fd17e74b28d64566d646ce664486a32476490f54ff15c546111e8e1fc9db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188799 Malicious code in prettier-oberon-unuk-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1416ff5d8384ecbdb89cc7b68eabd1e69af5e47c782685dded612d683ca51e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188695 Malicious code in pi-emulate-lambda-alert-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236bb810d2fe074699de9d6eaf3ef0198b4b49689dc232910649ad3d8f66b4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276b04782d149811dc9305d2ecfbd7c083261dd68276b4e37f93efdb1c8a0d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dacad449794653a0b5a1fa80aea72047b558cceb5e827894de17bf5ef0bda21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolidnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29ee5b11de6c2e5e583936de3d53e528f760c8eba052953b3ef1bf9f6632cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uugucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9bef97a49c5762fdaaa911484abdc87dcc1b440273a56ca8bb7bbef95122d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufaibafiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369e0637ed5bb8619008c4a91046259609365d3409c40c25b3754a75bed8d5a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fidulgafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff3ba4c89cbd0a14f506bb0302a41669c8fb575057e29a8512db5cb2c3fe504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indexa-fotdio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af6a627b36d8a708e3530137ad0fda9fe06f74b33facdfb4cc2726e16f38ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kiufni-ufavcseqinsdxaodataycrptvmaduuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb423dc6fc06a261e004067c4b3d48ebe7235bcd4f093153c5381dc2d4d7d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifuilit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ee287d0f854e2ed88e4f1621d54fd69c0acb10cd279a46e3bf7b5f520b5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7973048e94f8e26bc0685d9c60d5f668e8580705029358fbcfe94edc72c9a994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefederdafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d9efeee38d4f2eb78455cd5f30d9b969555c180bdde6c2b263d33ce8eea021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-taba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5914699eeaeebe8aa196c1e3ea3330b560669100eb5e2bb8a19a11410a6e2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oikd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02929d3fc69117743419629d3d119dfe3d9daf397ce2ac4e96c4bda04ff9d48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyhfuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad298c95fae454e9cb9d06bb88ae65acd4c9fdf80c948eb60001bef4376c9aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...