MAL-2025-188252 Malicious code in neutronstar-native-dynamo-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64eb5f6281da92ca0de400672e8514b5e7e91819e20cb09e2904422be675fea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187937 Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814d9c5cb9e62fb3014607e0cc8e6b132834d0f216d57d6a055d9aba26c110d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-dalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76039ef50e1de2b77ea7d7962f7db844642e8d131068b55a7bcf35c4424fc5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokmiuaanla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578292431351e4fd867d5a2d6f948960e6b88b66634e58f04b7fa2d9c1940e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabbamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc69f9a615f06a1736629eff2fc029002b3eb2a54e46cbc06ac8f471c33db0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabualiukabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99d54fd0dea0aeb05820c33dce0b92dcc0cbc97257d93abc4b5291d368fced9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabukaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae0f58ea0bb0707ece8aa42f8bbf43d202464832eb806f4cd89d277b3a6de10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinuhsuouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58603f6c06e8d789ddcecf1a711f1a3cdaa2d73721ef7182d116657b229bb776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oa-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89999e7964af437b190544463afd312a036f433ac216060b40b8973623b2a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoia-inlubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4af30e81fef5fd7965307224cc0e576096634eeb3046a09d4c16d42d4028a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-taii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26870ec3dfe7116ba8c6d3fa509ae87026a1eac817ba2b983d011c0c6fe93e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-oli-abari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037049c2ac2727b3d7bc15177943b04c3a7278dd489c45a544e76ec6c0c0fc8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olimois-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3578c5502cc9ee86a8c80a193c5431afa859d94e45415156731ce21ea0be7590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7358f02fdd1e3be680cf0861d22c48f80a2b801b6c93fbcebafc2ab8cfddcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28a2f27add803d710b030611b1e4b08f5430c3a52839891532a9b83f8909f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-ni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e8e15789a5a0dff88f80f7f1dd6f41109058400e70ab154df171453e9e2ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-niluvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5ef6bf42d4bb1ccf98ae0ccca0f13cead9d6d23b4a11a4c33f677e5b211480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-bai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586eaa0fe460d4af0048fc8142760d2a321f69f72e546a8eedc0b30095234151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutag-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee722dd2c06d347a898820ddf689bc23d19751e208ebd9c6e5f8422242ccc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidabilmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed35904c7a20eb4be11c2d7878bbdc5e090150efc0d2f90f4866d3ed717e0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...