MAL-2025-187584 Malicious code in janus-rocket-crust-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d68df4dd0ef3941fc01f5427a525386ddef1adb2f0de27c41bda77a6971c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186316 Malicious code in cors-centaurus-electron-builder-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeccfb1d261c6ca7989d2be6cee1c0b020d5eaa19f8a9d0e008e8d47573304c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cccce9c562e0787be13ef05abe15fc5c284143d486c64f21f87775e6999815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46dc343fea8389cf32e3d6ae79d04aa6b8a29ddb8fc30df91212854ae0ef69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavufiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e2c7e2fdf2caa9aab473a8df8243ee2c9d93f6cb673ea57bda30575ad89a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafifug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f029352f431dc278bdb6cf3173e7a5402f991dabd4bb22330db1fef957774ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggantgyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebba633d1e62e83180d0f52898dee82ba7f83f013cea6be5ec4067e58b1a2d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3865280f14ef168d773eb58848523039e8e2490ddaf069998c52e795bb516ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5a5239abae48e0b1e34104fde4096fe41f9f7f3af5d8a2df7e01587c5624ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudiaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f765b984dfe3c6ef52816e23955230a2831402a1ad915d173b1df690ca3d983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-afayafuyacuicig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6342cd7fab97329c9e3e86cbb1a21dc269e9447fcc811495e5711cb25a1af142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-damfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5a12237d68573ffeb4e992551fb85c49c193bad7c88f0c9dce2da9f03cca15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca74ed0f4f77b67b1246ce51373fc8a7193c051ca0d8bf024f9dc3d85f8f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-ildgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2756271b6334628803d639e9ff43ec25927fa3d15b082257d1081eda9b3811d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gisagabugailan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40dd6467190d9b84426e6eac078e1bacde79fba2d13822367dca501960e8e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf43bb2ad69d0cff1c31d6316c86ead8bf16d97c8e75d7fb0781dac957eb29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-sywfsetef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582bf997dabe34de522276f541e5fde87d4f56c77bc71d2ba564e063134c2415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ufavcseqinsdadataycaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29c9e974dd9a465b892754ca481f8ca22bea76102748143869706242ace56eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d378327361be19f66459d3b835e3754921c128e643a95ac70522383204ad593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehxafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a367aa95a8f3bb9eab5281674493368db9f933eea8bd00c928aa798696aa3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...