MAL-2025-189044 Malicious code in quick-info-star-new-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8d2af4a7471f80995ba4591bc1d021217434d34977fb94879b5ed115d965a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188736 Malicious code in planetology-neptune-bellatrix-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f2b23e9b8a39df059205b517a8ab6243a9cc96f26b1be0aa2c2639737a9919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185709 Malicious code in awk-sun-deploy-key-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269eb7a813c15992670144ef18f9ce3cea7e0df757009a82a2b25dff93f3dd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187806 Malicious code in lint-janus-juno-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c4d24d6c0937c0a916af5b388852eb2c5e7fb318480dba1e23ab03c3047296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188117 Malicious code in mongoose-wolf-deimos-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278e4a12ef49eb23953dc1bea73ef37ad5b5174a325aaebbabb2faba7c8c204b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188672 Malicious code in phoebe-holography-deimos-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f786ef6f1326d79ed74a82e68991e790daceb5da183862a7f8406b1c60880be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185427 Malicious code in algol-apollo-dotenv-parse-variables-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dbf3d57217d8a8fb345de059ba274eff8da19e26b131ff5780683b2ec9c167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185907 Malicious code in brane-kardashevscale-coronalmassejection-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d78059d5443582ab6158f56cc1d43c50c6eedf26fad4a962657ce841e070eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186933 Malicious code in extremophile-geochemistry-dendrochronology-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea310cfefb66f08a96c3188538369447bd04612535e404ae87469b672b6668c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digokiuasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc3bf05f8b50186b3e3638a3f34b2c359d3b4aff6d477d8096c68c10c1df84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb983febd18968a8597732bf01c611ca293ca69c6a38ec0b596c88fa6ef2550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obos-bimabaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da80dfc6a0240a4247a11b4af4b5d356c8211e21ba77d8913d13cf0554b153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-aggrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d934b529a34fab097759ca2edca5718a4a269e985d3338c92d84fe51d01b8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-ibifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31379a469ebfc09f8110ece98c134a8a97ee8f2d81ac73a4765624a15196cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0d4f9694d7d6a19fa1bb1ec2f1ed97b2b73f3c6813e6a8ce6565440fa777d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifbaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949cdd45b5b7c01b24c7368fdc5fd3188c433c78708fc7ea0accb372fd946b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3228a091b7e60346844fed3269ce3b9049f79b56f6314ca8a4db89f6f9731f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-agufiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7ff80643c3a3e765637c087cda2bccd805ed3eead915438b21c03e3592a57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abufavaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 551c9111516b8c7e362f36e4065c8e00809f68b8612fd9ee8e7ffad840a2d2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7855dd702bdec2e4e6ae5894411aa79c1a842fd4a44ac44b8161942cfa4dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...