MAL-2025-186377 Malicious code in cross-env-atlas-non-blocking-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c136167139e7da8f2dfa597abcb7ee932a4d5968c1f94382ea87cc5b9e43128d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187046 Malicious code in framework-release-it-fornax-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b7d00319abd576e303397fbe78c43c769e871f30b6725bd501a0203e38c58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185641 Malicious code in atlas-standard-ursa-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c6f3fc3edf4f35bc1bbdcbf1b42b067954257dafb13d5506a7dc70a03f6785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-daicutamaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fa1bb5458070d0fdf7a50a050abc09a0161bf32412cb7e2eaab9e69a542fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-dafda-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45db12e610b1d9bf971db21a04159dcd06a849a283af574771cc8653eaf5201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172738 Malicious code in afrrri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57e1125a0ac07b5e4a38c4b4f4226358a5b1d33fae73722a86d8e4252379861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177302 Malicious code in poglymer-ogih-aafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420e7174f37b82e967d340a002b6f7be2fd68fbaa880c50ae84c86423b1884c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176560 Malicious code in nuilva-avaim-rusiavantinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a7341cd834f6724750d74b0a51d7a4186d86a0fa174e069f12125b361ed627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170973 Malicious code in biancasantos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38f33c8571d0e0249f792091f60bb946db0b2898cc33f5f3986096104aea6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigugaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f3b4eea85a51a1a6ff6fda4f9fff32b712be36bc134d5e20bd85902584b6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a47d6f94eced05c40f45a65e99d584e3d93db92e91f232283c04c55ec3d3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152147 Malicious code in akabia-aligma-aibava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dbe7b0daf3e88c9b807d90a83aaba91c146dfab8880d451bb5db3de76881f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b59790865902cd72aabb1943031af7549a135b9bdf8c625fe570a6b972b3a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153935 Malicious code in bufpani-mau-namafaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71be66e90386b951990ab61269a7f8760cfeb5fe3a233813a45f26ffa5fd33b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160066 Malicious code in manurung-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc91551e06cd18229b49265ca5b529c19463ec28b8164de37ef5b660b7147b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169966 Malicious code in uinsu-lot-bisabmyuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a4b5028ff6ecea92d97e4644e6ccda493a97ac1e4b782b6cbd4ad4c403b21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162209 Malicious code in nokire-abimanyu90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25ad5e98d940e6ff708f24d058ec290d19616f5897bb7990fa999d7eefc2c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160613 Malicious code in modirai-fuhopia-jabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbf6c92545ad216b6e7cf3f73243747cd4e10d1df7651b51c248d907bd7ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143885 Malicious code in javascript-pegasus-chariklo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6997bd3466d1dbc0d2d8e506913bb83f681fd0e26386f1abe92ec640aecc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148474 Malicious code in taurus-module-style-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...