MAL-2025-189186 Malicious code in repository-heka-nestjs-mesosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280a9a067b4d3a3569af0705929db53acb6d1cabc8a723c0f0e6fbe9a4024fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186635 Malicious code in double-rain-protected-import-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8581e04e65ec57750c45a77518bc0bde32027cce7cec3092673048972abc390a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186137 Malicious code in chi-mu-socket-cold-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c962890667949b1dda36ebe56787555eacad6d8b589542c2a0f944f45c3d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186826 Malicious code in error-fast-class-visualize-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ab6287114c993123a1c774b449f01bfe2dc45a5f5b310517d84dc224ebd170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186332 Malicious code in cosmiconfig-xml-rehype-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c337d51a5afe782ff83bde8f55685686a71e8d4b23d52af00c64f247b76db8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187541 Malicious code in iota-levels-foundation-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c2b0af1eef0fba29bf292945385ea48af585baa02b34ea53e9ae76e24eca73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187961 Malicious code in mechatronics-deneb-bunyan-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d599caec2bfcecde9b1d411603b07dd551398020115dfb5d3378fb712c2a9951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc47eccd57d192a5ab4901ea86a8de5b8f42f9f44d3142464c9bd189ace6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifadiahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b530559eb17999e080904c04f92b015c7dc40f11441378bfd71b03a49071c70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ec69a80dfb84c03c5a4b2d9a9f81d697315a8ff78bf65062dec25b79bdca53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da57976355a45b7c3e3d81f52626f15dc06c3b89be5f226adbefce786c3a1210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126cb5404315db1b43244f4afe3b8d2b34b2d80d534e41a150acff53ca551188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-vivi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addd1a4ad3f3e7959b7e1f0bdbf392ad038ecd9a2b1573ab57ea8c9a8cce1954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfafud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92919d5e1929192664be55c601ab141a80a687840ca4a64f07fdba7d26325496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacuvolafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1d4768a3e0845bb0f0807740cdb6d4594db1befc93475749a64405cb1fe188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-ibuffdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1bfeaaed82168490f5295989a273f0c852935a05417bd1c6020b29285bc8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad4610217d9a297aee3cf041c4ed4f6ace73c9c08b175df9ab0866a4e5b3122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5573713b25e7e3c4a743c81ef1024c0720a5612a8bf4cdac1b5e14ab8d857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agiduyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d236a74d4d3a305ce137ce1faa77798b104e1835dd65b61bedbf7278a42b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...