MAL-2025-187705 Malicious code in kronos-ichnology-dotenv-safe-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c772d9ee172d9d8a4149b89bb7e9d6739711a4032f4fe5a817bbd35ea114c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189880 Malicious code in test-book-final-epsilon-char (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705fa95826e8c9052b49c3e15d57712ea0539ad61c99740eb3298fc3f6319b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187488 Malicious code in inquirer-loop-airbnb-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8366fb7af261b96acb44c44992384f7e1c7b11ce57f40c11ab549619a5a443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189993 Malicious code in tree-notify-fire-resolve-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58286446bdb6c6f5f5005a6bc809b0344a781e5d24164ab1e56e1fe30e434940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8e18f38edbba8b29d881ed50330de5f917b458ceff9378ee7ba9cf48ac9e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182857 Malicious code in itale-adci-ggpantekkkktolyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53d76b66339259f99b98e3e5225aa0bd456f92047b518f4704cb4238b06c67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181581 Malicious code in asta-alif-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4e97b7bddf1e5d66fedf8a97d6a681c4c708bbe21e5b0432cc0a63d27ec8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181740 Malicious code in avangi-ogoa-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ea9805d92c354897ae452edfdbc6ceebaa2190cbb03eee83f6a185eb8f7214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183005 Malicious code in itale-dci-rfsfrgdget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04a3d1080dde3d169c9523f4b295ad79786d820e91ef69fc0f40a13ae4dad36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185271 Malicious code in tunis-kit-gahufaduufdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 411089e96c4a176eb811222cc81bf740d2fd6392efeab2bdaa2ef899e16c3be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183344 Malicious code in liobc-ug-afayafuyaicig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8c38da7ff90aa1512e206667bce0174e5bbaeae76de7a8c3eac0707cb44fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafugyfgab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c454b1ea286ed68f9305a1bd07e6859c988d0d6641e56f7adabb1465f63ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatufagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad99c325aa7d22b00a4f8f02cdd4677d7304c4148409e13f741d18b90608e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57898fef6929070fe1a668ad66a7e0eac73eccbffb35ab0ba2140f5b23e5789b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumajiabusubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f47abcc6f00e53b313223a472f4fb39d3866430cdf6b025cb66a611384d605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisaois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f8c3a402b364ef8b8c02e6590540f77ebace7d2165189450ab75c9dbd9d10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafiaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed055df0c57ed1a26e46920d6b582b2f5d1efd76d9725e7879e85e1416c44d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0047ebad62628afc662020c2244ad4bf5b402a62000defcebc9ee0f2aab59a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...