MAL-2025-189691 Malicious code in string-beta-benchmark-scale-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3882c058c785bd049ed13423d9d06d22f92666c8d8425b6b99e0150daa0b099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188013 Malicious code in meteor-bionics-schema-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de16c695f4b26dcedf1f8fe7b76d18b9c5022baaddaf23ddd0024dd05f8917ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189865 Malicious code in terser-isostasy-build-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4033657f71986b123682d6e7e4343c3f93c872e361a0aab7fce5e54e109361a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187590 Malicious code in jasmine-metalsmith-schema-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67d95657794543c0c975eb63112589e29b6bcfdff3feed460227a8b21843de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186121 Malicious code in char-cat-execute-eta-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9713342fe9737ab1d549067b7de055aba480da58db6bdea8625417cc3c3c0a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185563 Malicious code in ariel-virgo-husky-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef531ac98ebdc581568a34a60826b1733fd289987d4b27691c292b8bacf3e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-private-cors-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace10051a820256b1feb41cfdb500d090f5eb7eb32135cb711b558c71818aada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186256 Malicious code in commitlint-resolvers-procyon-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a42a0bd7b27857197441ce982e9035d4e93ebf009d7bb23942627d9ce0b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facc075dd9444f2723af86599f1c0a112a283b2d101a025f16374e4e5a91ff5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef13e89f65ac30f6cc8b9b50e4f0e3cb2194e4243ba5224d1b7fcff01646757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labiza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca3078fbc91df83b92537c5c90fab082594d842717b258544c052d2f7e71738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugjij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5c3cc014959b901783595f884d96e910548173231e8260ef585977d34aca89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-bba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae054998aa18ff253d9702d18f41cbf63bde4361706f00b4a71f3ffc53a17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafivvuaviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d87fa50f3dfd346b69f6f120675d953669ab105f2f519b84fce15cc58751251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoa-inumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e770c03fc66224ac50a30317170f617931d5c20547b39cf0d209f874179644a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0caf3184bb437b8a797b85f0fa626b76271b47cb60b138f087dd24fa586192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-giossisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8da78aea58ec22d8ef0e2a79c63c6b333f98c79c5588c3d378f8ea4dcaaa0a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgrdcadfavfhafebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0542a2ff20ca86b3c21ac7c8aabf587fe9b37b0309173d9c03798ddad3ec032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagafah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f3b41836eb5cd3783ab9b26cae74f012d0bf9afb2fd45df1f27d50afa21f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacfovadfjoux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e897962dbd887421ea71268a37af10dd000a66033d28a2766453e617e5da85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...