MAL-2025-185455 Malicious code in andromeda-grus-leda-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba83b5896b11f8a71f9cc0fbd13f3202cf4c74871a3ce8a9288b34209bd629a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187384 Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab15840c7162a1c78bb10f8ff332b175c7f6472daf912e63eb81d372dc63e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primatology-technosignature-magnetosphere-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb9ab28fb0d25c1d31157674fadc3130df8137ade8adb06630447d3c3639e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mock-sandbox-private-stub-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b278ec81aa032c216582a6a7be827213f777087cf4b2e0c8d2537c5889bbe8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff31d31551cd8e922fa0afda1195d08b39c347a7b6ceba7cf3377e8a49d0c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03bf4d2991ca6ad4927724b4c282268d998bc3c680d0bc2277463d3be66a740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadeae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fe97beb379d933ede7615629558a59ec49169f8f6eed790dd9ca25da4f347a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d6c142d9dd3ce4e89f65dfabe18d3cf27b0da85a0b35d23c7278ad0da4e4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1e7f26b1e03257b0a9de39250dd26e57309b94a5669863355501c2479a48f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cocakmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57038eb96fb5a78c6c5d9e7a282072fc49b1e501b11176e136646f90f5e498c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183363 Malicious code in lobac-ub-afdmafdacatfeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e95d40dd065d3ac16c6ecbba7f119369702ade4a442006780fb6891633cba58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181778 Malicious code in avangi-olika-tbao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa49ea64e1752e8e6d86a9c83a0d68a8e6317c4634ade546acbc3d7b30f7334a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184074 Malicious code in mitouko-ontcami-lamokinbia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c2f0acd2323d9b27fff1f7f119bd63ba4a0cbb7c0352951240086e166e34cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185202 Malicious code in sonic-os-afisigafafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51dc77fe91f8f16da94855493ee1d2d7624dd0bf33f56a0d7df7b6a5d0e76158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184186 Malicious code in modaiv-kvu-ibuagoufaucab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d0d28bfbe91b7a88d650d9f1208b8d7e1956d98410f52c489d8e692ade55d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30abfd1c15b3d8b8fb070cc2df1995a745a2b8b78efed6a774319b91ecaff682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181912 Malicious code in avarag-olubis-balmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c2fc298e1bf78364a1ce5c0d483f6246e3b6eb2eea53694b8ba660ca498967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182058 Malicious code in flights-tuig-alakanjintew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb185fa62f1253e7b43aa8ef6971d875b07b59e32c2f176c8c4142beeaa8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185041 Malicious code in sonic-kots-aufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1977e69d97b88c5beb3f89fc181ce83abba5f00344ac4d2db755ccdfa049bb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cbsav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab83d18269f22b80276b6429a52bfab661d216993dbc971eec6c0f01796d8d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...