MAL-2025-186469 Malicious code in dagda-ganymede-fornax-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c482e6ef43cf12ba929a25f688df88502f4b2657364bb234a83ecb03729ec0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185854 Malicious code in blaze-transport-eridanus-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132336594566f83353e8d26153b7eaa947954f4e3280dca688c1d21777f60534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187785 Malicious code in lightyear-cors-quasar-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429afdc097b789886b2f73a40a1eb7753fceba27a84af51e06977ae222b5f0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189279 Malicious code in root-fire-user-hash-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d661d39558df81fa68a4a36b87bcf5da9ce98e30924826a802a862aef080e2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189308 Malicious code in sadr-proxima-uninstall-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae035b667df2da489c93555d27bdb3a7cfe04311fe176852f8da12f8278923c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189007 Malicious code in quantum-sirius-spinner-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009730042d0c36541d7a9147c37bc383153c82e0dff8575f0337d20d263c0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188601 Malicious code in pegasus-parcel-gravity-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7c77592ddbb2a0c217090e29a01954c5a286d43b507212a97f05b41da1e3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187900 Malicious code in magellan-enif-oauth-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc4c2c8bf18364da4a637c9c2468fd55bb49f379d7c4e4155628de1d3945d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189682 Malicious code in stream-build-ganymede-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b83fb6af139dbb9bbd46a83057ddae76e5bac4e17b4d50dc4543a894b03951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188483 Malicious code in oscillation-grunt-magellan-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd14a9cfb0412ff331fb4db228750a5bd7779ced3a892c4048366316c2786fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adisdfglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55318b3222478a7542a44527df3819db32650456d094f9e653eb2f22ba28e596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafizgantng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e68689ffcd5df0ccd9c052714cd98ee0fd149870271f9cba959a6dedc05312a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-laps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70bc013b814bb39527dadfbda3215f770d72caf832836687257e42d2a2027558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-notar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68306d645661f39fa3b3e4062f33dc46b56d3c9216b59f155231498665cf3731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafufiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77068e34e94237a64b817e5c84cbff2d167e2e865d515f7d41fcf615cc3d0a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafuifiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2754226febfbe72f3b3f8d03a73ce426b070c7a4035ee8ba8d1b7aaaf7028202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-ssfres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29dae9d62376035746c8b57804f56d26d5626ec2c4ceb05cfd29da01ec89af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b823a9978fc24e7cdced02302ea5d983e0f0d4d257360a549bd22d2a34b285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afmcauncxabtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01fc51e988644a397748be35781fc62284b2f7dde770602285b3e34d0b0ba13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-daliunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf9e3c4e090244c0d18b8ff7fa50a09c5f1bf94e05c6f189dac63851f0dcc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...