MAL-2025-188486 Malicious code in oscillation-readable-supernova-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51ba16ddec20c5fa98e0be10274cb14d7ed4c223f9f5a94cd339d2118dff1d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solarnebula-browserify-lightyear-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0114a2c36dc9ade148440482f25df3f599403a605d2438cde49dd242f702b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planetology-phenomic-accretion-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965e1b0010f33e8ea2e875abf1ccba954eb7ad0cac0ccb41e741e8016b3b5690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190364 Malicious code in xenobiology-galaxy-supervisor-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9780d66b7273cfefcf3d7a543189a07d3aa5cd6748bc5dcc03324829558117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusiaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c744033640d46109a0afbdb85dd6ccb264d258e382920ffa9c4aca3c67882ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181597 Malicious code in astam-if-dabamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf938d692304b0b2292fbe0614bb75ddeb40889d2530820d94da2f42f427908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181242 Malicious code in @akunsansan0/biru53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f47a56a11892bfd7d72329ec628a9c9ca5e164a0ea32bef21bc956898ba0d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fosac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad58c698d6dfa306dbd31de1259f52492e63158f01edfb14f3af2b9e83fe73a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gagasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221d93c3576b2b362ebdf6be16fdbf0f517622f4c86d214925d30b80c3b0b67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176139 Malicious code in mins-natudfa-munfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ee763cea7f4cb77b87c0a7ae75292fe74bdafcec6aae084f1bfa1bc69d0eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172677 Malicious code in abaah-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5762ccb3a5ff1dd79564adddd057d8586037b2ce3bd77eb735e3af21a5fc30c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179010 Malicious code in tearich-ralat6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6781695f9b2665be8ff8335965ce429a06f29c8528825e346d416f2198d8c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177819 Malicious code in polymer-avoadfifa-abohdoahdfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395a208eaced5216d27b384f245d39ac80557d1fb5fea2450746c46e34bc10d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matinla-uni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dbf3f03f66688a592d061c6e46a97144ba27c05bc25ecd2532cc8fb407e23e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aamirhakeem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd454d56bb067e094bc232f2adb4946c9897818afbc36d448610f0dbb13adca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qasimameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21890301ddc06bdc522b0cd900fb0939c358f986144d8305cf09cbfd74f96f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163403 Malicious code in nokire-sekiya16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52011f03415a1e8b333adc5d4e84e904d3b1694f3d05f84462782ed7ccf7070e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-afofsaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4207c6945a51979b37437999d8f7a7c7a07d53e4d33d6e573c09493d705507cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luaauvuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f5b56e90cca5fab2b9582d64bed2525da7011f9809094c62799a2b1ecaebce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifua-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ac35230685a4d80718df9e5e98561e495146d51c11c24344c41fce31c2cc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...