MAL-2025-189773 Malicious code in superposition-enif-genomics-australis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b19039f799c264b55268ec78deda7724532392d55f4d90094459c77fbf12ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4696f5497362a28ffc24161db611b2c81f11e180efb4772e3eac3d25aeecea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183466 Malicious code in lobac-ubg-abufe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877c7ebeac9b2ed67eb57720b7a6add005171bc8d4bcf1aebf1b98185211b3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b2fe61149882e9b2742be60f115634d6ae7fcf17bf26f5e8bd634bafc06b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-mli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75dc505caf3fbae9607114fd3cb13bc5e1395a3c76575a088ea4af937d1de72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-joia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a5e47c8e16d22116558d8a6c3a644f0cd3c6c6d91c87c80761c38fc85fa373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178584 Malicious code in sahunim-sat-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e336141c7a8b6d9d7fcd26363fbfca4d7a28ec2411a0205027d6d9107541b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178262 Malicious code in rintono-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93ba3abaedc46daf267b00d36f5f9139099f5af2faee189e1436645aaf8176e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-aami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a612773ddfa05110a41910516fac1ed4f05ec23ad17da8ea6267eb4edff2a554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanuauir-sofai-du (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fab935c06c2f6823a6aa9bc2a3c39663d1b85e3f921e92d6991071959497957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179114 Malicious code in thambi-vsbers-butsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca707348e4a7675df985f3f8ea739157af0a0b24a91c3ec7912485402c3db44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178378 Malicious code in sahnim-satag-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284be2e04b9739016d09548660b310d8e662f055ca8c5878f11c6a36d42cf5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samuelwalker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bef3cbe5cbe4f2a836936fa6bdabaa8bab3a2a10238aef8ca357741b6041590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elizabethharris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80721552e043c30fd07d61fd4fc3807a62b27baf8fe1f8cc1a2118d79d5a222c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167129 Malicious code in teagood-manaki61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad4c6f4ce57f34c89d1bbf4e164f6d58bdafda2ff3938f1deb1cded747daf5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-sedssad-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a414f0dbc120caff5c0156ab72a37c3a1a181cb953d89bf146fc282963c512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167650 Malicious code in teagood-nalikoli90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac66a1d1278abf6c492aed36f8b495edbb4fe9e87f0caac63665996e14017749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162054 Malicious code in nedarida-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0d62b94ccc695eeb637be495fa6435afd5982e509b0fa2c61c5da0eba94f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb242031d67b7382d47daebc158eb4da99ccd2cff28ae889d81389cc68b6b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...