MAL-2025-188173 Malicious code in nashira-winston-aurora-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af5c52e6cf6987260607279112d0d054adf72f69bd5cad9cc62fec8cf109c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-buffer-install-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d173a46b2222709ebde51168c15d95d657b1e4e9bdebe6edb1073438c8838fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-spectron-webdriver-ignite-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7825fb698098acfc9237bd9d71a9037ffc59b30a8a2d44a9f74468e7506bfceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188485 Malicious code in oscillation-oscillation-accretion-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aabcc23741bcf27357094729678d0020795b582d6ff8e15a2a87d1131c48525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxy-interface-visualize-thread-psi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddea4dbb6eff0705e7dafca9a928b20e3f7c53e53533c9ce697d23afba2267d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-pm2-toml-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39fb8a9d75395b1785a187dc32fd7123d42ea214d0d3cd4f9526ff421b0a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avang-oliutka-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2031e817f01ebe858ff7ff64bee3bffd895539616b54b4819e7fa71d8c05aab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173761 Malicious code in butry-mutyu-wer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37546b56a6e767f2df39fe3cf3b1de9a648e178c2dc0523c6a09810a737237f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-arash-millio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f838470e7c6e82a8b18dc6854bab4416b79a81276510daa30309062538d145a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170808 Malicious code in ameenzaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87a056ab681f51e44a4c61d78ead21a1ca8c9c28f87d0c747e375b7249cda6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171585 Malicious code in milkywaymentor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fc1c210f105ed1b9167aa6fe8292a0319f2309fb4264021175404fa452bf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7afa6c6dea1bb09500f38bcea7bf8ad583d0df77848291b22348dcc33878f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883ebfdb857dd8a1afda6c47c7a171cc8a218de209aa7b4f9979978af88f394b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e8fce296f9f5ea02660e629231ba9a10ffc4c9282432829aff9d92ccea2300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154026 Malicious code in carv-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f5efb54dffe3e8093211f6623f4e521fa3a1e350723479eef0780fd6b86ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166750 Malicious code in teaa-reborn7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aade9e0c06085073c445433c6653594832fee4dd4b0291c91e41e8144abe001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151107 Malicious code in abeh-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa55bae5f9b8810363c5324c43a0a5288f587e076331e1dfb0733088194360e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164328 Malicious code in pitra-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3dda8ea565fce5796a421a5177d325432cc8cf6d32727b882a3b8aa9c3f9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulali-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6c0707a654ac88bee5faae9eefe1f4f24ebd35c825cbb99092847a3fa02c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcd636a261d212129275a49dd602623d45fbb31d2ba96313b1b23015e6234b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...