MAL-2025-186801 Malicious code in equinox-sedna-sequelize-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d21c1e2f37e5e821a84eed480f80f27b364ea4e2b3e2b5cc5e1d16499a649a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187146 Malicious code in genomics-lightyear-mesosphere-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1443676fd94c32ffc79df6aede4df75f935ca9d1bc99e7c99bdeb9e440ebdd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187196 Malicious code in google-radiant-weywot-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c66e0686c4618a725de20e95e6ce1715c68327b6ccc280c359a1139312e4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188963 Malicious code in publish-yildun-magnetosphere-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb89cf07a1705113e53696ca73ca6a22b8cf88af3bf3ca4a7eeb158514ec49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisostsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245800ff90c2f22b0478cdd48b2c7e0899423a67d912520bddc6ada569a23113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33b840d77d4e89e100dae8972ade33fcfffee39000c4036991a733ad560fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a8816ad3d6edf9cb5f17f7b3cab8bb6b2d1996cf47781348ec255eecaf0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f221bc7412471e7ff718bef5da77e89d40c807e9832bb938ed29789c90b0a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahianaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf1475095c0183844fbc23f2dd531cb23b63f25bc37b45e61533b085c00852a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-ibaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361e44741dde62aec89ff8b98d8859deafaebbbd366c5b6ff04ca96f99241abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uthi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419656e30a34414d961680d45e8df5c828e689c595d4b4a9680af7a57b701960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184036 Malicious code in mitoko-ontcami-lamokoinab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a9d5e3641e040bd5b85fa22963e2f00da6f1063773b01f4a07eaa362272783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182409 Malicious code in imodiov-kufni-acumnacf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd99ba84341a32284988018a964c0232147a0e6372574bca168e0b947c90896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2327f8675f5419c53a777b1c94cfb12b5ceb8c57aea2cc1a41f58ad82a589aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oiads-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd6d83892da422712fe9570af403c96c7136e88509ce9caf0b4d8871abea4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagafah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f3b41836eb5cd3783ab9b26cae74f012d0bf9afb2fd45df1f27d50afa21f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfggauyuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8adb9911e5b66904be5ff6e7eab85c00a45b4d40822ba0b1f648e9e7a30eed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7855dd702bdec2e4e6ae5894411aa79c1a842fd4a44ac44b8161942cfa4dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumanb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf77c3b213d8dccf9ff9277aeb047c8c78be2172a6ed4cc9c73d2b624a683765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguauaota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d14ecf738ed26d879a25f1d85bbc1195ebaee6d4c699b46a5a05200a93f194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...