MAL-2025-152885 Malicious code in aril-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb86ae8e0b6366ddb8a605d77ed5beb375886188a790011c25ba0c953874548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161709 Malicious code in nabuf-otomin-nosudfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af3165b4396e4a4a00bc09733261cb32ef93c587ca9888679662aee1f2980b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vuma-nuagbarifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad1b22f8da427cb8cfe59bc7287aed95318eca2fe5450ce0301cc485b5000da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157341 Malicious code in kamasada-nusta-budan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30059658ce0e06bcbb38bbc3e246c8442e2cd4da60d892137432a93ad23e7c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aligfh-aihmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b03bcb7da10767934c7201e5c239c3b4b5d82eef5282ea5d264ec273121cbee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanukakili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56857214d67b3876f84e72d99d7c134f33200bf5e20012bb3b739e9b3787af14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyadtu-tyt-daut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fd714a418c246d3daa74f9a64cfc30c8076ad27d3fd7a6da25bb2210c7539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59dccb0cb40e6a2239607c8feae865971d717277b33047820b26d8fa1f89c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nufat-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba72f72e3b042562c88bb5fcc1697c6daa8609a02d5d74b43b36f4c2502bb6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169798 Malicious code in uinsu-lis-amdakinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7e9eff065e8e15c9072bd0892e6096cc238936014bc739af7eb41244d2f5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161189 Malicious code in mutus-nutra-nuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e063061e860ec40a5869876a6355edadc365f566b35c0d9f325459326cc466b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169306 Malicious code in trevora-fissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8288fc10211cdaaa10dfa5cb4c752ff9c21c868825cd75334c15cc536281fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159928 Malicious code in manttu-muni-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f940cf79e56e3ee6a93ca26e5fa693d204cc218abcbe3fe32806eb667ade3b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166653 Malicious code in syahmuda-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab630cf42bfe868f39432aec17ba11b434c8ff441381c398956987794fca8c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167544 Malicious code in teagood-nalikoli134 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b389cde205766c769b507f119348979913abe61af8175e1bcfc4a99a1e13b046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-subscription-loglevel-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a14f5f7acca2db1c52ece29d5ea1c8cc85499a0ac6b337fcb30226a7f4fe4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-polaris-cressida-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba26fa4dbb1e602577b4133c013d196b716317ba0da07038cef37f6f9ff5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-delphinus-farout-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f370a395c2d47ea909b67d7db2433dbcdc997442f2a384b050ea0c2e241a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-husky-slidev-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1929a75c829c843ef72262bb4a5950eaaf009bb43cc62551856338044b7dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140641 Malicious code in chalk-gulp-helmet-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e819892ef4c38110723e1c2772e4b9b3e9b6d1168ce269f008df5ec18f81a7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...