MAL-2025-189276 Malicious code in rollup-plugin-start-galaxy-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6f9ff2255f568a5fe51812bfe0074491bde1fc7e58142a7d271a74671ed39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gissi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7e28a0ed941ae823debc038d39afa60a6645d8d86375f65e4b9a8ded45c968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55acd2e13084fb12a32b4c456cd664630db57f5088783648ce9018f0d3dafba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuvafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2afa8e155ebe4ddba158d620bb6adfbe36025661c47606bb2e90d896febe24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177179 Malicious code in nuyar-maniak-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408efc2a1b63c139c8bf5adb71d303d29dbc475cb91521a50a9f765b9d555fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karimbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cea1f005581ecfa82868d456f92e42ec1a051ca656a2d3b37ea4c24d738667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170962 Malicious code in batagor-kering (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900f16ef2a1087150396bbddb887d787b5a745b22b20563fb55bd43c6fdb21e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3dcd58a237ecd93a9d34fba2fc427159ec022aa98ee7dd3e4b686c95ff06baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safma-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421302c98ce5734454310a67c073d347d9a28437d13a430f92bcbcf20a2d4401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9515e4f8da31d309e3608cd3c51cb931d7a5b559bfd912c7e1128acd6e32ca7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-g0afigagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee898817ff9930f66a27bdeb396e265a920babe0b348c8494399f69525b23943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lukzuli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f8d81536df8966bf5e775f6a75fc14b03578fe447bf14f3f198de287131c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165531 Malicious code in sabudaaopa-muyua-bafuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920ca95a111ee3bb58d786b819fac833a25c2529cf55ab599b22d7f2c3d2e87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157214 Malicious code in jurss-zas-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2ad4b4532e8209c5dd66b3e61fe262662f87c83e11cc1df266553c001ed35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149570 Malicious code in writable-jabbah-elektra-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2feed5d5984cca695429759e5e8f913ea156640eefaa638a116b0017549eb39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-bunyan-sagitta-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6652924b7c5dd4f3de7ca35faf7feb625b269bf18150aaa33440823825e8c9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147896 Malicious code in server-element-ui-aldebaran-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe35319a0e1502f611d4adf34672070439f01d604657bca8167ebf2b2aefa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-bakso75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963dd5cd7dc2c9395fd5ab47a441b98ee8cac58c9987d5b82d2240eb10fc90e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-toge81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a10ad749815889b5fd3fbb443166a4d3f7c3678ac24066a3fb7e6ccd1236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...