MAL-2025-186854 Malicious code in eta-proxy-omicron-theta-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236c542af2b6ed42542ff27935ed3593b1509125430b4348128a798de5c9fe1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188019 Malicious code in meteor-cosmochemistry-parsec-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018f42ff841a03bfe473a2be5b8a5c9547a9ff5fd7162c174cc4bf249906c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187105 Malicious code in ganymede-meteor-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6caf727d2ca931162dc42199e8135f7c9bc25580dc02019ae90f6876bc9655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189278 Malicious code in root-cluster-bad-final-rho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e40f7f5e09039c8649780bc1df2004bbac256e735a86bd382908a03f1354e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofagiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f800451491780eb3162715cc887022e8288887ff3c9ca5e64ebc87a0682d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiaso1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f8a9c63f2cb4e402a924766172f0ba5f3adcf2f6034c257680c99f1d981af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lapikamasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7343e149dc4e34e2034012138695614d673876b2fbd946cec78a013566caad77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uthgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d5540f0b83deeb125d6796db3e6d0d52c2c6873fdfba379bdae72536f52f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iaimai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ba70aee21e7cb3e5acf3465c264d0ce13b615cb34feec3a7b8ad0e638f3198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jauab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc1d30cfa1e02ad4c3382b2428b9bea1b709288e79762143cfffdb413d1d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76694eb9d3d7e264fe4203567c7b6e33889cbb33fbbf262173a9ed2111d9db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afayor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e022bb123117c10c392337bf19e71f805fbcfe63a93c3957a2e416e8b9efb000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduihsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f65d51f5974d7645eacbf7740216e63d4aa8be3e79248f9234f3ff046b024ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31320a9dcff1b51f545c46e683497a3b2e713e497c991afc2afd170e6f12bf93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbavuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b6cbe51e165e05248443dd811b1e6abede4597e8d8f377335754987c12df80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuulltryfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac111cb195d14f32a89b39cd37078e53b3898475c1278c38c489a653e39944c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-obolduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72519bd44dbdc96d57d71b3b1969bf25dcbfb2daf2772ba5760475c4e4ac2012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-timeseyawaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50688a346d036eee7d66a1970c71f3ebe92162c15cee2d4e3b01b265657e8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...