MAL-2025-187396 Malicious code in hydra-cryovolcano-darkmatter-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2558357ef70a6fc079199ab0ba49575fdb5981e5a25319670df41141c2206874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189736 Malicious code in sun-thread-monitor-void-sun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047adcabcc874fbcf09307af5ef5c1dacf009d157f5e7e349936d9bae83a1fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189497 Malicious code in signal-throw-pi-sun-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e40c2a16112d2cd840182125f10235ca77233b407e2bf856c543f547bbbec0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnygs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b93fb3a6f5820ce95d95b13257c1e23e84b9ecf13eb286060354eab6ad12dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafegadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38db537bdbb9ac692f0171eba73b63a2a9641bb316d1bbfc96ab3b1a0815758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184701 Malicious code in oloc-uyg-ugohfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64de33983032eb16a22d7de2fc80304fc170257f69790fddc9931df520657e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iayafucmfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2f3512d637e8aa30c4dd98c4c0b269aeb1c06d4cd9a98ecccbe56b82f0ff1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183682 Malicious code in manu-oi-gisiasyvasgugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805a438c50ab4bc7c276383a08276bc780753461194c3ea61e52991d2d7177e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181283 Malicious code in @akunsansan0/karedok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8002834ffb5b2a795e730681a6f3acf6b237f10b301970add5c54d833d41ab98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3a279fc717426cfac9f9e168c90eb534937306d14912b8849b75a21d05a010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboloa-minispe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c33ce950ddf6e183931903ece6b7d367c88eb327ec4f06bef7af24122f03f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-opiinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507d1483bab61aef5d368b7253b1eee639f35de8b186aec6eaf62192801b023a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-finfef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4547d8678fa5a74162df2a869a66dcf17d880d653fa4b996df762f29372c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-uflij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8ed2c8b00993499e39cbd2cae14c0833b42ac1dff5c78b05dd360682864e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agsifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcbcd6d25848f3364d1a80b5981871f8a8d3a2eea2c3b35401827d31295c992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adarafdia-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a480f35ac776176c6911e8f4ca03e73d1e30193d6492ae35974058dfa00677d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174936 Malicious code in inul-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55706435058417cbe13d3ad0dad3cbf40e65f83494ec45ddd47054b3ef491204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173267 Malicious code in buis-sunina-munaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0509cdd8910b780e66d36d00a21ac3629487721e25a8cace9cca91ae5c6689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ssssaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c619e8b235c30509afa376f26fa0a8a2e8cec3235c2d7fc842c642960bba682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176925 Malicious code in nurai-sutaif-danabuffia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07f781e2c76fb70df2dd4f926ee420db545ef05c7b383b54e786f1983b27541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...