MAL-2025-189403 Malicious code in sed-secure-rain-water-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd93355c379fb04cebb47c7a76029b9ecbc852e8bbaae7413f21844b2222cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186537 Malicious code in dendrochronology-colors-cosmos-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c58b497bfa810639e7f04a95d1dfdce0066084759d6a3d71419afa81f4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c02ae108d31860db90b1a0afde180c30cf4dab805820670ff7102c739951b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcadgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541cb764e24880fee7bbd1465dff38717ca640fb7b6010f4e86dfe4490b008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184541 Malicious code in mokok-lukaunai-hunauaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5fcdc42b840359880f0961f718af54c54ce72cf048a91e5945aed113fbae9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uuggaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1d6d301b19e3831792a0177984fc801fa47754d9d7df51ceda15ce20993cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181832 Malicious code in avangs-olioms-nolifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38129b92b47d1182a150a30815ddc2718a422109c2fd06bc89dbee6efbd3b06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183120 Malicious code in item-atim-ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b69c3dcc16fdf9ee876642a7dde0e74d202652e098c76bf7f4712eb37dd502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182341 Malicious code in imodiov-kofi-cuidcavumnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed8ac77f16aa69a603546ff70c350dc9d677c24c884378e49f7a61cdffcf99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183387 Malicious code in lobac-ub-jfgaayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a064245ae6b242801867474940e337168fdd81ee1f1fb97262c00571db8580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184209 Malicious code in modasiv-kuvu-baiucaufabiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8f5688c2914ffad3f40e1ee5a781dc92fb59dbb1639935a8bd4fd1ccb19bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gigaiuasgsfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf632c663f24e30b695eef9894a8d0b800d98d30be397f49ecc535e7e715a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8081936317aabb1d804cb6fa6935078fc970eaf224cd64c6896c3563bf751fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b101c3d14bfc442595534c8d7c30fde3deb9c449d0a6ab664ca6110635d274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavisvoemolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962607cb45586f2764eeea9e30e1d283b9636cf945d3d9cc828b964090b7f75b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-agi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968f90ea9195dd76bdf7421c2fe74a4adaa31227f502d11dcf996cca7424da6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183038 Malicious code in itale-dci-srfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec56681fdd4d43d646481b0fa63418ed08c0684e6c620ebb1c13055cfdf2b543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184835 Malicious code in poliaoz-aiksgsdfo-alon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c30f0b6f20cc35b602fbe7872a2b8e6a8cbb405355a482cb3de1546766b54d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181594 Malicious code in astam-akif-daliunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf9e3c4e090244c0d18b8ff7fa50a09c5f1bf94e05c6f189dac63851f0dcc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182017 Malicious code in flights-lutuig-adilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d21a343d17ecb73b8c135feedec85366f60e8a72f7f9c8772da8a012a25f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...