MAL-2025-186807 Malicious code in eridanus-geochronology-element-ui-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c70e6b62e3a9f2699ecf4f192f3066aa1df8d5e90541a43a39c446e93e35fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188602 Malicious code in pegasus-pulsar-plutology-astrochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7119678a00523fb454aee015dc8349a8b07748c775b4a6d48223cfa6da03a0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188356 Malicious code in nova-quantum-protractor-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b35d5356afc081638f9e5562655901df31ef1d90eb6c13779454805d9ab8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186949 Malicious code in fermion-geochronology-quito-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a2f7cc81ec51b781fdd5edf0b82a3ff487dfdb67166aaac920eefd31e6d59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187177 Malicious code in global-cassini-hexo-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8261faea100870ddc8b1d2bc37fc01e95b83d8331ba91092d10e31091009d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-alpha-code-sun-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75cb602c6b94108ac0d207627555585711911a931cde0410f20974c8c45d67f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-geodynamo-holography-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161eeb2af5e07a48c3afcc0c4cb1ffb743e291005e4a004fc3d14e91464f24b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185928 Malicious code in build-geoarchaeology-mutation-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ee4d207302be939457bba8282eadfa6cedbbfd6ef02bc6f279847b956f4f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-agfag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b31bfeecc2d2226825d2a2c9dd17c52e65be797cfc758c596d4c458c25cc6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoeroaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6365f310ba66f2c1592c2979677e967c99e95992d168cfaa1bc25fa38851ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakiuoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 141df0ec849b8864dbf69f8b8c573127ea06c4c2a41ef598a541c3c355c82b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danugamicfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233457f82c9d479ed4fc900a3acc9f618a5712b2be5486251f1285edde7760bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afhigbanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79b93917f2014367444ae865087f1048605160b2edfb0e62c7075becdf3097d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufauban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69721e702d96aef8df87b80ed754155d544bc0a7c85047f03097b194228645e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaompmnodg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1802f4c95ed723ba1053d20155e28a68682c11308a2280310f3b9252a725904c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-systrt4tf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c4357db147e0cf23d40e4e42e112fadb8c41b0528c23a5df30915ad082c80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185294 Malicious code in tunis-kjt-gas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b77bd1d7457e1bc5ebc6f217c1865eb141c9ff289a69122888bea076e5f9cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183662 Malicious code in mahnu-oy-gisostsiogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7075f1b2f307be2b5cf8c31bbb407719d74ceb4b2789e975a00f062b1359c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183694 Malicious code in manu-oi-gsi01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea378d1c24203619246c20ded82eb8213f2d4715d9142815460e907bc9f9238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182076 Malicious code in flights-tuiga-alumabivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd7c72418ef6a3fa5806c9c2b688ed017799ef8e3f6671cc8146b1e6a5e3964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...