MAL-2025-189276 Malicious code in rollup-plugin-start-galaxy-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6f9ff2255f568a5fe51812bfe0074491bde1fc7e58142a7d271a74671ed39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184946 Malicious code in sonic-kas-ahagauji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3368d00443e2132d1d94f66cf24dd43e0d10d98b115e38bee6ce1662578e736e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183136 Malicious code in item-atim-kubusisazika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e937113bf4f299f034e549d171ca53af844dd9c8cc1f81f219cd89137e6b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gissi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7e28a0ed941ae823debc038d39afa60a6645d8d86375f65e4b9a8ded45c968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181547 Malicious code in roti39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fda9be59d767a6d0be4efce2f0bb291f9a72fbe2e5782e0bb800b69bfe37d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179994 Malicious code in lookingan-nanakila67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0344b67cd5e13ef350edf34867e8e12064c55790d237d0cddc802749d33438f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fig-dn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1decb83133518a36c3afa019cff615daec82cde0b9b58d6275e2abea9ebbd4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-dodec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648e88313aa443d876f0b246b884a1d4c996da2bc430446af3f18ef9fc79a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180317 Malicious code in teate-thy-sonic-ebni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb0e0f7bb11a55bf77d5e85e9ef2af1b8bfbf8d70b2ad91a90aa2e1f517fc25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jokosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c50c9631c4da1ab18c750eaedcee0be6a2e82299dd1b98f3f4d56f653c0e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresd-dsfsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d576e1d9fb64dfaf012d58733d86e2b876bec9b9e5c0ff20e841d8fc96c39f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gffsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a651d85bccfd2ec3d6bff91faf18d80c9b919ba21fee431594d28a8ddd6bc0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuvafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2afa8e155ebe4ddba158d620bb6adfbe36025661c47606bb2e90d896febe24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55acd2e13084fb12a32b4c456cd664630db57f5088783648ce9018f0d3dafba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafgsjffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedbcbb5735505c001f0e4c8894d166552efac4b41d2ddc22633202f78d26f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-rispa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168c55d6fafa727dd08f8bcc4b35b694aa48928af125a25634068dabb54de5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177179 Malicious code in nuyar-maniak-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408efc2a1b63c139c8bf5adb71d303d29dbc475cb91521a50a9f765b9d555fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172168 Malicious code in aps-leod-nutay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1875fe62b9a69ec757aebd0e8e2bc21afad9f6e38b8a3385d00b7dadb6849587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gracehill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b9285d10d8708c8b2099c698f1f5b125dfe7d5d0fd3eb74caa92082f34a958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karimbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cea1f005581ecfa82868d456f92e42ec1a051ca656a2d3b37ea4c24d738667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...