MAL-2025-189251 Malicious code in robotics-auriga-eclipse-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c8603622ee8e5a543e52a8e1616d015299b855bbd4ffd91c72063efc39f558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboloa-miope-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07dd54124cc0aac5b58436b922b6af42c71e186058b8338e8cf90928153f831f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beardoze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d09b8e59d8259392ca51b7775d2001f26f19ba8cb68f1834c059d9e5ff22ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454d3d0d6d5f842d4c82e6795470f4c212f8b5d09b75d5590f7b442d8a251711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140470 Malicious code in cassini-mensa-kastra-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3159ca473ca3810c1e97cd5748be5958ae8417f1f88bf30e7e1f6f1ada5d4caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lapis65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14baa18852fce24dd77e0515456d6b1535f5982afe90dd919619396f0e5adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127306 Malicious code in ida-rangi52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd5b33f329e339e7a7af1e6a7a98da91c6e79b22b71c50e4f15a19fa3b98b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119706 Malicious code in eko-miebogor61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083c3c4cfb3de24e9e5c616be9bc70e21fcdc83d36c3ea08486189085395ea3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119802 Malicious code in erick-telur81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf7e06b43f27e4372e737ad840d8214fc60672e9af923fe7bda2602bfc487aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117198 Malicious code in splendid_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7968a390c5a87580a0fa3d309c4241d61965c4696a2832556e8691d08fa1258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111720 Malicious code in chosen_beaver_fuchsia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce8e19445af07c5b051f7090b14453025d7e79377e2fb44037831ed9b326f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_albatross_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef83c764ee47111a84ddc9993c6b9abdf56e1900acb01fbd37b7a0dc9c0daa6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106521 Malicious code in ocha-klipo12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ecfd146ca28e150114163d29cdc04415be710c9451b21ae58c118c37646d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-kepok25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62738608e1ddb897e6fe62e6b9f9aa2997922597c3053343a93764444aa8f47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60612 Malicious code in holy_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4744bdc55e19d664a35d0d34c8d8efd72aab6bbaf3ef18799cab127db7abafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c3b89cda8607982f093ec15166a03b212286de59599293445d3811f8b8b7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...