MAL-2025-185370 Malicious code in acamar-child-process-oauth-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecf9405e1356b230c3b5e02f074df3b4d1c15deed220a1ee0fa696389b7d321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187709 Malicious code in kronos-pipe-delphinus-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960c07082250d878b37b3a5f9a803c37008c32b0ac7d9deefdf8bc4284a2bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parsec-build-nconf-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595407dabb110959c49e151c6feeedb533e80313ec87ae8e34d80792d2dfd6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189511 Malicious code in singularity-rigel-quasarjet-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf17252b6c653ae675c4bf9480413b571a70ae7390302d63383fdc0b937794f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-dysonswarm-yildun-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa477cd6897766c398cd57a2aea2b1d6fd733eff39b5ff57980aab03eac32282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186559 Malicious code in deploy-awk-user-psi-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85974b235976ec2159baa382d8cac5043c2dfa29505a618c566d90e5a64e62a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189848 Malicious code in tectonophysics-paleoanthropology-pegasus-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ceffeea78e713fda29ff11bd8a85a44edec98204994151a3e0232ca19dae572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184302 Malicious code in modiov-kifni-ufavcseqinsdxaoycurptv-auban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0805781d4528c49381044778068a603eaae9430f88ecdd3368848086ab6660ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184688 Malicious code in olobc-uyg-ugoofahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a077e461c09a6ef3e1144a1938adfa44a10090b926503890539c2d71c9158741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgusytduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba486481c94ae67075ed34706194b26c35d4116cad8bc7dcdc71bce98a20f482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtaoagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99ecfcd261af270f5fb2cc145bad455c6507c757ff900250bcd7711a5ac9370c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181755 Malicious code in avangi-olia-iaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47093a7d8448c760ea60c35f842c7e45f15ea4b3b9d0f0e4292175c4c700ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182469 Malicious code in imodiov-kufni-ufavcseqinsdadataycaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29c9e974dd9a465b892754ca481f8ca22bea76102748143869706242ace56eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afyganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb0cd6c374123fe7accdc6ecddee3a066e5ce9fa0040e7fc1cc64de0f7dc753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labiomizaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14642c84ee23eedc4862e92c53d66288e02204231e85a0e88766f2b2f1eca8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184784 Malicious code in poliaoz-aiko-akuivnaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198288d7cfb413f84b5236a23ed3427a6a8bd61bed5df3f6062d7d79d99463b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-ujoul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83140cfc8315057339d1878c603011f4f2ded2652ceda1393955a7b80dc58f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugiukatajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14bd06c4c4e4c61766e632aaf5651d08dc0ae0427f99d3ad1179c28245566aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182419 Malicious code in imodiov-kufni-acumnacffgteafgrcavefac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665557ed3df870a0ff5a8093513390c22744013d5ecb152637ac5a7d786d9c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184291 Malicious code in modiov-kian-avumangaffiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f8eee7671cea3ae583f68f691300257e827b32f51cf5067296eaedc7c84104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...