Malicious code in sun-thread-monitor-void-sun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047adcabcc874fbcf09307af5ef5c1dacf009d157f5e7e349936d9bae83a1fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gammarayburst-venus-tectonophysics-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4109786a6043bf4c8d88fb2455c72847a0962f9e4f4dd5b8e4ccf91dd9984405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hash-uglify-cluster-info-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a3a53ec24253c6ab5d1ed24fd3cb74c1c53f7311dc887ff7434622f50ad233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190144 Malicious code in version-pyxis-spawn-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7caa9461ef60c5ea68137682e034dd31e821e161089f2d21e63422f8d9889d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188362 Malicious code in npm-global-sublimation-augmentedreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd49961f0d54ac7944b8c564af29d8e2be7f5aab114048fc3a52eaad56e34ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifagaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d65d2c6aca7c37ad7d1b5f9999b3358cc62a7fc8c388116e24c47accc7b8b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177201 Malicious code in poglymer-ogaguh-hgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87c4ce2ea3b0747fca86eb651d7043643eca49a2a4290a0122cc3c795686e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176355 Malicious code in nokire-kushina33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a44f9bc2ba271520322eee524b2beb8ae74134c6f90b9faffe7b465e553796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179259 Malicious code in trui-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-s1aa2s-ra2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d236ea11d4d39c2cf2ac757dee61f84355e4ddac0d044c53eb0c918bcf520c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliga-aiamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da23bf5e620fdbc39061da5a50fa49ad0a05c839b0a89827531b45817a015b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155465 Malicious code in guras-tuya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efea36c11ffe8afe5ff4001cc8170cb130691437181e6256587c891190ab3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165332 Malicious code in sabua-muhay-nyabutufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5747580af4f587fc736bddf56b7989cb0246da27439b19d17d02572e2cc43732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iifj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958864736a9a90f0297d702e86db536733059eb87b7ccf39b6327b1eaf5d66f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiule-amaniua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6987055f9a916bdc76f0f44521e35f518fa3a17b2c05a08bd75ca7622b678019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaisor-dar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1749719adcba8cde19724db1105524d3bb03a470d318dfeccb315afe9fc0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afgagagnfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5d5c86641e2347de6f15d8e974b3e22998d69cd1d8d8d1a797f2f77c84c467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7fa42cd8438e718dd20f739522fe74552ab36510a99268486db5395d4c5567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169949 Malicious code in uinsu-lost-diunsuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b2a4c4ee2be6bf2cc7668b28ab5f1147a618693b8ceff7685929c2b3fdf531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159336 Malicious code in manadi-scavior-dare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f8a599b4c93d2b7cbdfa7e1a922d34ffb5928d159d5d9e12d7f061357b8e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...