MAL-2025-186983 Malicious code in finally-function-boolean-refactor-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee4d596d3d5de9024b75ee7f595262969bb1f126b1d3cbf2688b216df11c2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185582 Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69657448b3b6a02182e970bfbecadf73fe036e1a80d496d9efe2ead57291f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187850 Malicious code in loglevel-hyperion-bootstrap-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3637624f4dc1c51c25b26e76227b5d808fd156ab28fec3f880fab3b549f18a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187218 Malicious code in gravity-taurus-superflare-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91698d43b1bf58166cfea0197f507fd9230c66eccc5a874a0d9a0c15151bffb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187424 Malicious code in ignite-chai-mira-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce891d93375fc44ef940ba2e552f0edb96f80dd9d0738d90e22a7a411c2fb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187283 Malicious code in hash-socket-slow-debug-interpret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb938e088242a057f495dc0624b819b9294c2ad57b502008354dd8cad5c61db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186665 Malicious code in earth-protected-gamma-test-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607017a42bce9e56670763a33b409d170584375240403b448fd7b4741454f5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187626 Malicious code in json-miranda-karma-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e21153db14daaf54497f5b3ea3e6b717421a572780efa5d938efdcb121cd30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186127 Malicious code in chariklo-dysonswarm-yildun-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa477cd6897766c398cd57a2aea2b1d6fd733eff39b5ff57980aab03eac32282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190056 Malicious code in unix-earth-zero-decrypt-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104f65dbb8a50faf4807c98c86ddea4df1e228f34b5b687aacbe3f6286776b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b5ecb542a413c9b8b727f4bca98f634eb0b792f47d6522997f486487b947e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgopigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082ff2d66979d0f2b073bc8f2e9812248c01496b1ed3db0a70c2dfec37468b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akonlki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ddfd0424592c551ddab661021906d0c6ef233f8da1fe03e4c607f6909f7558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-daki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ef53fcaa5c36ceedd974ca0a1bca0a44bd05eadf38141b50e4407845987b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavugagijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c197a012ee127a2adeaf0793455d0159513cd2359741e1b9618feb7da3fa74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakinuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3da3df8ce72b93da4e21e5aca1c77195c5b2fe656501765d1cb6b8b8e28e63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmafdacafeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e174eaa05b7b65e6ed969bc051aa0d8f9b7d7727edb3623214b55d2330175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanahid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876e5b29aeaecfd4c01a7399f6fad9e6277e2b4130799c8d6dc9100a4ce8c532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokulia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cb22d315a501d03b10e8adbaebb56ad3c4455a69a9e6796866a8af99e11574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd332317ef789a457bf34f39c869ab536c5e9a85ef6acb9170967b2dd755bd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...