MAL-2025-189123 Malicious code in refactor-socket-container-wind-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d89a8b301a82e34718e719086eb65c46906b20adf7618bcf4881930e6ec4b03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189574 Malicious code in socket-uglify-notify-assert-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79e32644b78e05c920de11e095dba2ea5f33e39ee8abd5838124522edd0c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186142 Malicious code in child-process-charon-mui-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5e948049c8cfee3a492e90195667a71b6c916914451d1fdfaa8ec56a48d7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185490 Malicious code in apex-fork-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27abde9d095ffe2c468fec2bb75102133f4803428db20e669e77b0057e79fd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189606 Malicious code in spectron-csv-dynamo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbf027f428c69dd10d7d00bc4d1e879261d2ddb9873cc7a63ccbbdecde071f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185377 Malicious code in accretion-avior-radiometric-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3811d7127ab0f5c5a2b3ec85970082d7d64f2cf6385ed38227ee4a60dbb9819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190390 Malicious code in xi-abstract-user-alert-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d75d95e94323f65152772d90e7d52b5035b21d824667592987d3bf9f9a023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190196 Malicious code in vuepress-winston-deneb-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b680b994c88a74132e41b6149654104412796e59caf936a14b48d70c5e97e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185878 Malicious code in boolean-fork-uglify-dog-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2398286c5bd8b36359dfe96e05f9bd79387f0ed461e40f664b3528ec4bcf92a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186714 Malicious code in element-ui-jabbah-chalk-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3f9316015fa5ef848708130ef54aed0cf418b68094a0778716dae464213509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187154 Malicious code in geoarchaeology-oberon-proteomics-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4457df8bb683c248eb0726675b92eb63a0c31125a2f8c3dbdee0b1dae031dcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tectonophysics-farout-cordelia-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf5bcf2afab2b331136836c91d71ee1f886593553e406a307a1708222d4af10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d101a618a7ba068b27581dafecb570667e436fba7e4643a4b4cfd467407f0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimamfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf58ecbffd0025a078eaad92b8243c4a8a66d8a47297848beca0fc22195711f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-notsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f409f7896799d8807cf3f4bea8f8c60e79e0d194ea5a6055f8aa1856b67facab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofity-gam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5272ba7013a3a976f41ede99c7368a4d03ec098c817baed9f5202d5273a29909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiukuanaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c750ffe930e8a93e3df443348779f21b95fa3fdc0f2efc0675327c9f6f2a3797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avcaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7dcae918ceedd2393d86597d1eb7b34c627b289e772658069e48ef97cfcbb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugjij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5c3cc014959b901783595f884d96e910548173231e8260ef585977d34aca89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945f1602f50098527c16f9da5b6ed99ee65e0c906e9718c0da407fc41ffde44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...