MAL-2025-187658 Malicious code in kappa-lambda-bundle-omega-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3516bb36d404921aab8ace5bf2b731d171a18c77988e5770e5d3d3db842d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-shelljs-quark-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c62f3ca6bb9a8405ca6865e83fdd43928f000b1e887a138caaaf6a211618764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187753 Malicious code in less-less-phenomic-paleoclimatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7ce82d0de177a86da9faff7ef6e6acca5663e15b9edd4f70881eea4adcd72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186606 Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190404 Malicious code in xo-halley-less-loader-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b37dc1940687ac22f89462e574c1e94a104bb168b0c8d2da912aebf30896e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188896 Malicious code in protractor-biotechnology-hercules-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163a7ced86ddfa55ba2c67f667dc44c1bac1fdaddd5dc437b94c8877eeed6e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185477 Malicious code in antares-thermochronology-parallax-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edfdd0642d9a4048a8b1734c5efe86d4bab6e2ec788036da89cafd83cb23f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agugaaruf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 630a6bcc37034e79cc128621dbc9f7f16662436e73c3f2e92a2165aecaae5010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ef637e129e6a88cbf90ae50a03727fe724446ae5375e3137045215308ea30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-aganafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff39a4c72b141dc629d397c5a80b698f6ce2dbf98d9edd2c33387b8be4397d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-ig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2414cfc0a5ffece70bfd298c98c0d9e8bada7ac516f7219204cb4d78e732b018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184409 Malicious code in modiov-kihon-afbaufcaducxabnyvgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ddae6fe580a1b001b6f7a4d70d57905cc5be0954f220f4e3198dc16cac78a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183280 Malicious code in kisut-diug-danugamicfufoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef354e853b3d63c08ba81f8a90c24a60fe8a1da8d8e2d635cbd180c1e3c2c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnadeaqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b6e70cabb2d8082fbf7fc8061d42a1e29a9ac8c4f560d2ff420c730aa520e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alonaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e8d53ae537993c387f00cc62f459ef093786e7c1e436ccba9b3da162bf5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokok-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e67efc66e330bbfb86761efc806bef74bc613b705b2f83d32ba737b76b1821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50e29e8c15fcb58c4b7357e33a2b8c505d315332dfe617caff64ad7847084fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182288 Malicious code in imalok-ofe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d74b001422dfb69cf1a9df82c264d2ec65893db4edac2e3475812a5837fc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182054 Malicious code in flights-tuig-alakanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2994ae1b317dbb63d9a3f19d23c015a8d4192107d3f1d98e1616d55df06bc0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184576 Malicious code in odasv-kinu-bobacn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc823f56c7e6bb094742a3a37fa62e0a00e44523c3db483628e97eb7a22187f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...