MAL-2025-190358 Malicious code in xanthus-redis-scripts-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5378a4c2406d3bf5d4a642721349c3ebe3396f5805ea6a6298f597ae191792cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182082 Malicious code in gocay-gua-visigojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73a0c61880ae94170577cfe34ba123e6a0429d82036078730df4acb20885b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181157 Malicious code in teate-thy-sonic-zuvgus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7328513cd5015d1120b7d66506f8d7b583f1328fdce4656c7ed0bb0ee01efe5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nnur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b612054d3b8182776e466aee368e9ebd70944fa9aed858b4aa77a38fbcd2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176208 Malicious code in mufbafi-sufafnai-cauabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dc65425f216851914c45c57133e35acf318c4bb622064f74906bc7b331cb34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174199 Malicious code in godi-tuua-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b895e2b5964f2022b30099a798f2130c9fef772be81b1132ab01d2499bc2a847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179126 Malicious code in thambi-vsers-dfdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a07c217b3079bbd2a34b8dcfb991eedb34686aafc0522418f1e6383516d728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f5699869d677ea81687e769c7b26e48549e940d76e2463fb93ef68c746eee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee392148df5ba5d95940d2cbf0e13ac25fad067861d14df8aa9e8084c1bf2751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233901e1516dbdf1dc2d90696f10429071977bb2f5a25cfe5c6e0fc087a5ff39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ea998284e0a798eda1a7010e55a12a1f0dfc94a6e4ab6e92c69b2cb46a76f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158646 Malicious code in lookingan-namakita36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd5797ce3d595c4b676e3ed5100f5b4477067449c18963c9cdc9628e18def00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169104 Malicious code in tehnah-muifafo-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6213616989bc9161522553664df8cef7eee631d3e09bd89d326f98e0034ba678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155331 Malicious code in goodmanmax9250-cowboy-noted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f5aa0b9be9537a57954471914a8e744123b1e04b50d130963cd68f1a487b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170234 Malicious code in uyifiuza-iytadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346006a8cbfc7c16b0be7c08985763955d05e0577b1ec34a2831a4083af49517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-kinetic-eleventy-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c55d04b0a1a63f7c1a0e6430ecabfa0583740a02c97e2f76c406fece8ea9c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-fork-mutation-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793b36b14fb2abf3bdaac4f697b01eff9656ab057f26f8af0397d78ec7130074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143866 Malicious code in jasmine-spectron-andromeda-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e866e191c768ffc9613fc848c8413085a60f1120771feb660c7f58664e0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138945 Malicious code in progressive-pink-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56005554badc607ccd12af6834deb254bb7d6ecab68797ed3719127b27feb5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-kembang30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da93b63135aca9de22c2e098d86badc9f0e49bd7b246f6146703dbaa75f0a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...