MAL-2025-189682 Malicious code in stream-build-ganymede-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b83fb6af139dbb9bbd46a83057ddae76e5bac4e17b4d50dc4543a894b03951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188547 Malicious code in panspermia-oscillation-bioinformatics-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91373d25a0368f1b14587a511a5b8882955dbfcb47ee7e0849fcd671835d4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafizgantng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e68689ffcd5df0ccd9c052714cd98ee0fd149870271f9cba959a6dedc05312a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-laps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70bc013b814bb39527dadfbda3215f770d72caf832836687257e42d2a2027558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafufiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77068e34e94237a64b817e5c84cbff2d167e2e865d515f7d41fcf615cc3d0a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafuifiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2754226febfbe72f3b3f8d03a73ce426b070c7a4035ee8ba8d1b7aaaf7028202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-ssfres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29dae9d62376035746c8b57804f56d26d5626ec2c4ceb05cfd29da01ec89af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd9633eb7ad0822a1b326d3c85ec93d164fed22f5b5499c1851df3328c20945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b823a9978fc24e7cdced02302ea5d983e0f0d4d257360a549bd22d2a34b285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afmcauncxabtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01fc51e988644a397748be35781fc62284b2f7dde770602285b3e34d0b0ba13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-daliunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf9e3c4e090244c0d18b8ff7fa50a09c5f1bf94e05c6f189dac63851f0dcc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07211e083ea0fae208cb99c6313b760d9d02f00008518212b4e0fd4e484da6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90863871202809f863e22fcff6fafde6e0d34a59b688294784c84ff57f7e4333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b080c8a6352d1152a4dce40617d2a1fdd339bd7863fd683a647aa7630d1b21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490d567b7336db015e52efca7cc070afcfa5c9c464ed428bced9de666e4884e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iuaimai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f331bd8019189c04c173b78779085982ec74a5f5acf2b63874fac534888d43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183339 Malicious code in libc-ug-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45fe92289839e2b295d452a65ae4208dd084b33743c0b7ef06b4b8b9c087240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184441 Malicious code in modiov-kin-afbaufcaducxacags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea7649776ab28ab7763b91a79915c95bd48417403ffcf0dfb410edeea328d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184345 Malicious code in modiov-kifuni-ufbaceuiacfovadfhjodmux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bf1c392b7d6f1b99604f37791fccdb16096401e4dee04a731928a478bbf8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182060 Malicious code in flights-tuig-alakanjiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b2adbcc7346bb432a536f02ca7adb71a620b60a4a5874d8b0aa445ea61990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...