MAL-2025-189773 Malicious code in superposition-enif-genomics-australis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b19039f799c264b55268ec78deda7724532392d55f4d90094459c77fbf12ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4696f5497362a28ffc24161db611b2c81f11e180efb4772e3eac3d25aeecea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183466 Malicious code in lobac-ubg-abufe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877c7ebeac9b2ed67eb57720b7a6add005171bc8d4bcf1aebf1b98185211b3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b2fe61149882e9b2742be60f115634d6ae7fcf17bf26f5e8bd634bafc06b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-mli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75dc505caf3fbae9607114fd3cb13bc5e1395a3c76575a088ea4af937d1de72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanuauir-sofai-du (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fab935c06c2f6823a6aa9bc2a3c39663d1b85e3f921e92d6991071959497957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-joia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a5e47c8e16d22116558d8a6c3a644f0cd3c6c6d91c87c80761c38fc85fa373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-aami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a612773ddfa05110a41910516fac1ed4f05ec23ad17da8ea6267eb4edff2a554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179114 Malicious code in thambi-vsbers-butsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca707348e4a7675df985f3f8ea739157af0a0b24a91c3ec7912485402c3db44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178584 Malicious code in sahunim-sat-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e336141c7a8b6d9d7fcd26363fbfca4d7a28ec2411a0205027d6d9107541b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178262 Malicious code in rintono-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93ba3abaedc46daf267b00d36f5f9139099f5af2faee189e1436645aaf8176e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178378 Malicious code in sahnim-satag-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284be2e04b9739016d09548660b310d8e662f055ca8c5878f11c6a36d42cf5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samuelwalker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bef3cbe5cbe4f2a836936fa6bdabaa8bab3a2a10238aef8ca357741b6041590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elizabethharris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80721552e043c30fd07d61fd4fc3807a62b27baf8fe1f8cc1a2118d79d5a222c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-sedssad-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a414f0dbc120caff5c0156ab72a37c3a1a181cb953d89bf146fc282963c512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68482d81da8b27b87980c467fc18173de06c50b71b2d41ebf57c689fcc702e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb242031d67b7382d47daebc158eb4da99ccd2cff28ae889d81389cc68b6b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7671a6e8828558b0e06970e3616ff749aed945b60bf765be4edd60533f8f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maka-angabofi-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e8340c08d804a29f73c30c65cc085ed956639bb4cfbb30e2fa47d4a11d2446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...