MAL-2025-190472 Malicious code in zephyr-yakutsk-update-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4056139ea2e6931e54f1dbb6be8565d9c94ad19a8e4cc44520c8df7a00ac25f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190012 Malicious code in try-signal-lambda-execute-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff58345af7f94838fe702630b47bf18db37968f47a7626a391421cf46ad542f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188217 Malicious code in neptune-framework-cors-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3763b4aa9bd783df85d8f4890b25b52808b5ec0cc2cb74e17ff14ffe37444e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185553 Malicious code in areology-darkmatter-ablation-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfc4db01117ee624ad9404c0333c608488382abb48fbb690352e94c3f4e111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrusysyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42093684a00b5d297d4b3b23901d99c50a178355920d27359621806336f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafiufug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42fc95a2d78c0efa716ca01c0dd56ec4121709b43c877684a3ed2f15cd2b52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183351 Malicious code in liobc-ug-agfag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b31bfeecc2d2226825d2a2c9dd17c52e65be797cfc758c596d4c458c25cc6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184833 Malicious code in poliaoz-aiksgsdfo-alfdadgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf8764902ca00b878c7a9a823321c1e98e7cf995f29d54bdf31c48ec11f585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181998 Malicious code in flights-lutg-oidmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a1671745c2079ec4163497048c79d60e5ee9d5b1b569ffddc39ca2602d7a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184421 Malicious code in modiov-kilan-avmn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d85ed56f2f81b76e3e99e695be1071a98d59a1c172e7401ec88a47407907d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184019 Malicious code in mitoko-on-lakiuoaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225b2353cea9215f68e8a667b46d8901d5e942d488fa78ea6a9a08a40fdd44a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184283 Malicious code in modiov-kian-avcafiaacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c74fb2f6d559b70ea456567f549baa164260f563def2a0d9cd81cfa443805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avmniab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2015af86c721ef08029d6c56aec7345b176eabde43100190cbd245039fd72de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182837 Malicious code in itale-adci-ggmatondanggangtengydru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3038a2d49527fff17008ed236d6f01e78c5ff8804c2ad58d952746e0840be45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6fefa9955600e941537932e80a519b59980014f675284e452ebddeb64496bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacamuvaavua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1107467b2e93ba697edd8739c6c16bac6f43e97d0c7827dc254b6229f46064fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-aoan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bf154c5946019e6b144b54d55e67c4fed573cad4a4b6d095f49cf1a3b2d722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184570 Malicious code in odasv-kinu-bivoycaguab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75096712af21cf752b3bb449e809114725f30884728e3731b17a5da25401f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620f04e87ad1df634f77641bb527f6e6e2002e99dbdac7976c4a56af56a3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c68c5af1d045eb717b17918fae36cc8c2502237e0ddd9a7f037925477fb988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...