MAL-2025-188675 Malicious code in phoebe-react-bootstrap-heliophysics-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68274b408b6fb2382a5f5a2aa275eed20c2fe6bf4f3a8f6a33645d810c97545f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181691 Malicious code in astam-ifukst-daiusikiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de04f3bb88fc6fe6490d2a9e797069b73eee4895c6354c48ac131e32aa04f85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98b49a64d2dc578ee58d96f6a33307649d3c5a35aa784821ea190b1a75c43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157267 Malicious code in kamasada-nati-esanyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93767e36dceb49ad1b3384f6d6dacb9f055070c26a10a8a35558beb00ef27bdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161161 Malicious code in mutr-ssads-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fe8be05f6c1f72095df92ee7c1bf020e3f3d0fcf0f9262482127a77ee1a86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148436 Malicious code in sync-wasat-deimos-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b928c8b1e23b0ca5a42a3df176fa0f9a12482797e409ce6bc09d1a8c0636ca86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149676 Malicious code in xenos-framework-semantic-release-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcfb6a70cc74a7a285327bc1e80fd2bde9efb27de6de8ace88cbb4fd7376aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133928 Malicious code in hadi-donat82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd244cc4670bb7dc9088731367ea0506c292a824ef5d40726694c5e070ad048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-teh52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4daf4fccef3ae99bd333c1a48b0ede0e1848960a79bd5878695aed42bda4606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118496 Malicious code in zul-jengkol23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cef698e3b159ed3f51dc30597c5e222fa671be36df19319f45ce00846b58446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99017 Malicious code in yucky_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7d0290ee65de9f090a15409c7aa16ecbbfeb9eb368efd43c29e10e2c7df0bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasi4-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63544d25438207b8fb3027547987efdafaa814942000f9808ff319cae75d6189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-enting31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f72b7c76e0092215982600e4ea868361f35430efdd25b624cc99f650b16a2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88664 Malicious code in nana-buburayam10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cfd8ae662d004fdda09cb34f40a38a2fa58d0304b4c3cd74510c4ef8a80169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72907 Malicious code in fajar-teh59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d034c71c7413d567ce2a9fc817262b103bd4c38dbfddf133a06f9d0c1578d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72857 Malicious code in fadhil-sate1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1324e20698a8f55af264d06ed38b35d8c18805edb4cab56720010a483e179e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological-chocolate-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be91a29818cf248a10a0e9bd8c25e787f9eea5d232e1ca1eca03ba2afcbea5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...