MAL-2025-188598 Malicious code in pegasus-mui-dactyl-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0679388624378e5407482bc78a5f6cf2643b9db492ccb69df51e7e6c4a27ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190259 Malicious code in webdriver-manager-cosmos-mongoose-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fa86b786f980c3c1320b01efae8acafc5bf76d1ad8447eb7724e805a945ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190136 Malicious code in vega-xerxes-meissa-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63abf6534ea99f2d7edbd9fec922e534d5a525a6f21b8ba75ad9525c2a485d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181903 Malicious code in avarag-obis-bidabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63893b5c2dc03b3b9cca4ad46bbaf7b0b797fb878b8cff9509029f9f050e2d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180656 Malicious code in teate-thy-sonic-lokwal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6393a6db3a515c1f488ee2d1c03756a5679494e919131d256a1cc819d6caf5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29026f76a5dbd0897dc49c881194ea8ee2fdb4222613ba76bd871bc19924693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175087 Malicious code in kapio-samunu-maiavcavma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b7dedec4bb9122bb7cabe77c59b0aec7782d130f9ad0ed29a452b14ce44566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a175b480ae5909030f06ea49a1c998545ad36fa244e506eee863cc1e7bbafc26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178829 Malicious code in tauahur-sofi-dsh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f149a0098a187057343fe0d2d607aa6ceb70d1c672b7b97976dc3a074f45a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173888 Malicious code in diva-bani-imbbmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a133769398ed3dd6e10d7166e417deafed9302281d4a78927722ee22fba8168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butray-mutio-muty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71687870dae6b01f76807aabc852c8ff41c9f1ad1ba2ed9b440bba776ac8407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfdaogfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f069e77b22c23963cf8134fe0ae7747ce7d2cac6cfce3b66b144b6863905f4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174863 Malicious code in hunimi-satihu-angag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90dfa2687bb4775add53d64278ae7762f4bb6b806401674cb945c798cf70a85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179265 Malicious code in try-iutu-nusdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19edf1c695aed7dfc4ffa333d0c0e102fedfe39031bcbb14dca2e19141bc620f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6789174c197ddaeb3f8985e736b0a932596894eed37b0cfa63d1e99b861f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44a5ab78790634b5148943059cbb1204758936767d8dc36b87c84ec8514a398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162862 Malicious code in nokire-loklok11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b9d1619fd2afada4572e4ffa9691fb2d85d532e354eec8443550c2a061e392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163553 Malicious code in nokire-zabuza61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bcb07af33b464bc60645d0d0beb9c3483eb50f35bd58755ace9710530ea4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165465 Malicious code in sabua-muyaig-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5100963032385169e1174d728615a371c33f2f52bcd21834baa481badb8bc467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156692 Malicious code in inufgi-gotmua-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d940271bc269c0fad8de52a7fa924bb383b91bde61abc68b596cf6ec4637f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...