MAL-2025-186783 Malicious code in epimetheus-loglevel-membrane-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3882f96f6ba94008491b8b2d879161bdb319ae0eee595576b6f91e29c1b50df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186993 Malicious code in firebase-selenology-blitz-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186201 Malicious code in cold-old-monitor-zeta-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f605ed4e638cfcb600b10d7ae557001f37d7c6fcbb1353943a4f09ea29689a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186577 Malicious code in development-mineralogy-vortex-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a343064ea699049ea90be523317519eb296be20c57d7a4c231a935972f238d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189624 Malicious code in spica-oberon-sirius-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2795c1c908cdc462362e80d9776884cf1160dc014dbfb2f9820f5ac940eb6813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55aad895ac26fc7cb451d0d81d0571f6fd875126a378df8b6407d41bad70458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a9f6d70ab7b3e0c896ff6731a012f86a3fdf2f00ae94dbd5073c4d284b9097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-move (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c2a87911622f08206ba9746be6e2ab7b14cc9b587f4a9bc08bec6166f9ac74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviavue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74b72625ad407537cd907331a3467804c15158d037d09cab9278ceebf2cf3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0bu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 353a316dc441980c5569c15932f734a7ccbb111dd36fdf145cf734efb79545ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5af5522baafd9bec27b9d67aef423412b1c02ea18f70bc44a3c803723aef626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-viguvfuagudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc54852893fbab3d935ac8923d01bb52877f963df369eb5934afdfe3e0539fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-daknaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f114a0e13dc53b26a0866ae5456eb75c877103a70e2b7ddda4d75991ad0516cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d941d5a9444f3db2109822709e885508bc0ab5ec8c2d636749a4fa314cb3371d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigafifafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd30e3d1a06aa74f01aeac7b0ec398f01080410616ee45ef898e8a8756774fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafiafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f562228fb13b0286d654d4379c0fb97a654ac9034581bd7bdc8a2bddcb7b17c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuiaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a00cf3750f52b5ca62ee4e9b54036426066b0ce455cf55de5e488206deeab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ughi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3016f938426d39f973185c470108bb850a3e816a7b67dde3fb905ce1158107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0368fdd30c60709df318188d76d5867100094243d7e99d88a5148a4c162d05f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaguagaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6a9b6b0717d6550fcf161a8372dccab6b262ec945a2130e1ffe216ea0f9b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...