MAL-2025-189545 Malicious code in small-analyze-theta-signal-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4ba72a4e397a3deaa3cbad87c2fedeed49d4e7b21b42d23db36723b016477d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190212 Malicious code in warn-class-proxy-cron-earth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e5331e42e3534c01268c91bde85f93841803534273b5a092c7800660b1d4ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187035 Malicious code in fornax-phoebe-jabbah-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab6a4c8a169e333e9defa80910133b4b619a071f3e744ce182a3d24ec5ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b59e4c28d8e43ff52b161622de727bad25057dc092564db627f4a12e58a18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4ad60e61988960518fcda8bcdbeeb82eb18575c188daff702513fbaddc1232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asitam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758e831fc8d54957a107d71b57d6b783bdf404dc9e23b490504dc63550302ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifukilsit-daiskiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c492bc63cf31edead58ae9e307ee2f81a485abc6bd892bfc10f71645fd93d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-if (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5692a93f7c8727c0f72cee1e3ca9c2a9c03af8c1ab0c173636c0ff6dfd2e300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labiozkapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab643c0de6a871c0567172d77c86766839f1c6c6cc949fc9cecc08a36be5c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgustet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544c78325a060ad3c3a1a02da609c4db2b053cd0692c8447ff70df3a4c417e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315906dd4c81266b4b476d40d475a471d83bc7723d47d7f156a29ca9331735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756e6f297bc8738ecc787a94b85658e732550d12d1bcd2b9ceff95ab95dd52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagiajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb16cb3c74f751bf99c6b6d2b78ebfaea9dd75247ef575ddd326142b5eb8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusuiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e410b3470f44d7bbb1add945a9e8fa06785b42e6f7cc8342cd8238306821e257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuicn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f730898a07eca5561950cd74f7ead0724bd6756a10383ba3a4af731b8a3e3bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuamnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4123cd92701bc7f3b78afa1d259cafe4c47f81d88223defae0282bed5b487d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-holai-inulmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00789d98302d2d8003387a1c40cc86abe489a77fbfb7cade5372515c42f7d8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakinuaoabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6587df879b09b3e3d1880af4eadd68bd7a1c79388874957d2939be4166ece9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef05bff3e2e070d80c5dfe58e23e4307a18ea4d7bf22601ed8856507973b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6de0b6cb4cf167a07e37459c2d2c58d5037260698285a2b7aff74ccf671cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...