MAL-2025-189107 Malicious code in redis-browserify-nuxtjs-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711d716900670192f72189f880361a7e02ddd5ee99dcbecd1465b28f95bee624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-singularitarianism-procyon-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f87e7aabd6edcc6661dabe6c7ba3b26e4096378ffca7f6816c4bc5e8e82a9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190464 Malicious code in zephyr-hyperion-cypress-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c3120a7bcc6b643e7ee8de6d0ac0d7396a197a63da497db369d04c59ebc39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186060 Malicious code in centaurus-browserify-run-script-interferometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacc4a64b4d804b1463da01e313d7ac3dffa03dd38c41503807c199960b9afb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digokmiuaiasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80190fcbb42d9bba039bb68cde055bcc12354bf275f7ccf817a95af3684262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c2a114c5b200cc356c8e268c640d22ee5c5bd25c7e8eabdc30dc31c5397790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a515105704b364390c847f65133cacfa3f2bcf38b7bf048deb2b0932d07ad753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182193 Malicious code in gociay-unga-fugiufcgiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d623b8122fcd8f439c7ff440d4925865408fc94bb86bf0b21e364df9b2f83fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodij-agafb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac86ccd8cc78a48ab444ab4599ddb88b7de6e24d78c4c555b288843cfb2842a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-na0n-nitnuluki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f802fbe3d3addc54fca864d66344f9afb1a8fe53b42177c18985272d5e4c879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179086 Malicious code in thambi-retf-rsest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1499ab999d121e06c290e83d86d4741493100f39d47ae616deb479d9dcc3d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173967 Malicious code in diva-tuai-inj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40416b778b3a2fd88171e779ea85f66c500d9c210126954fd6f9420be63c6c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joee-bau-imu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff293e25cf9528267a75da4d9138ce2a9751e05a3f7a5a5ac39dd130cacec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179088 Malicious code in thambi-terd-vs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb642e3de0c4ffeac07d047b341b46933e801716caff6076729938a00184b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccf2e5b7cdabb75311e140b32617df533ec3a06199860b7b0a96251f32b0237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174774 Malicious code in hokage-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76904493617489a581b85d16f79c848dc3e8589897d9aecb6fe10846e0c96d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175384 Malicious code in kapvino-somagogamoi-ugafahagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced58545f860ed06451235d66f6d74f73fd6d2148e390066f59176fd31eff54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152604 Malicious code in anaisisulah-paufai-as9aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7923f71d2ba2a23932aa1226b4f7ad52591edb86877f49ec78e05db4db7601ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ca68753b85ae51f10a18b0f99a7e06f2d584c8b400eade2d7113dfc8c05c65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117fb027bffaa819dafc35b91d55ca501f83d570a3e09220cfdf764918644584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...