MAL-2025-188254 Malicious code in neutronstar-regulus-sqlite-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd76a2dd4b6f1c8374b68d6f578a4c53895f8cdc8fad0504324a71a8377a5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188225 Malicious code in neptune-node-sass-altair-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad682c7ef1b00daaed7b6861c4172801654dbd52ae27354ba342091db9601ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189093 Malicious code in readable-commitizen-photon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d1e169b74fcf6ff21db17a2bd352872408a7e6aa151fdd40f7844915ba42af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185499 Malicious code in apollo-development-cressida-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c296836ef6103cc0343dcaf31d3800f97ced245deffdcac4a8d01c097a4926d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188307 Malicious code in node-config-lynx-cressida-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a8390d9b4f7f0ca066259c5d2fb5a70e40e66cc7525724d3aadbfe0acf5fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190142 Malicious code in version-dactyl-npm-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feefba00e2caeb92217dc071b9a4fe68188e1dcb407e37e274f1d84a9eb05646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186879 Malicious code in eventhoriz-event-planckscale-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a969531dc342a3106319fd93ac645317db9acde1778df1db5647cfd186fda89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-spinner-solis-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d92bc8e061659af9912ea6207249e0e7d6993cab9fd076885c4a2971c386498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faverufadaxix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a327b855c6287637a9def619d9e6715c7eed1c6890d254419c5c918472811df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce01267608fa3b9c7b026e83872d7936e224bf30e90f4c326a4a6fc1cb9acda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrusysyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42093684a00b5d297d4b3b23901d99c50a178355920d27359621806336f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc89f15eb16eb7ea8dbaf4833eebd01ecd4b783a51996369fe679ee201573a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 363a0abb6422ac1ec7e515a556af29bcc40d6db24c8efd4ee80d95dfcba2ae7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-dalimkunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6011c890b389e1e1a0d7ee46fe730f0ff3e13300f6d3505d75a4ea4405e3e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7ec154070d1c79c46a223e89ae53d402f1785884e7db30c605d9d799ccc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a266b60094c2c1e7cec6f1156328ed576850b7dab91e91b515a5cf4fcd2e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agugrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eecf3e109f12a4ee140bf213080dcfdfcbb729de5b1fbff52c692ea9651240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76694eb9d3d7e264fe4203567c7b6e33889cbb33fbbf262173a9ed2111d9db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adisdfbasdglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e947e2d18656b665721b0b1e689bbd479c4cd5f2b2743b32733efc22ee3ab470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avumanaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db629712d0c323f05362f626b330c7e855c18ced48ad453b34063bb77aeab07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...