MAL-2025-186393 Malicious code in cryonics-cypress-stream-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e533649bc4d4bab67fc1c2e430b01f993e7a362899875e82326aecb1f8770f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187340 Malicious code in hercules-winston-janus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662c745f54f81147fa240741e0bd6e9bb86d4b36e48649b5f8c28febba93f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188500 Malicious code in paleobotany-janus-writable-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d24d77fbf63477dd28b1fee9f1049b7e8f13f0ae9aee555c30c1ee45e367e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189278 Malicious code in root-cluster-bad-final-rho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e40f7f5e09039c8649780bc1df2004bbac256e735a86bd382908a03f1354e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185386 Malicious code in adonis-cosmos-eslint-plugin-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51440d13be3a94db6138efdff6d65f7d866cbf0118a7f11859f4508a808663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186534 Malicious code in delta-string-enum-thread-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdaa218fcf1da6962e6363ac39a9737390e281d97f094cb7660d1ec9e6b733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudiaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f765b984dfe3c6ef52816e23955230a2831402a1ad915d173b1df690ca3d983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9824316a7d15211102f6327d6474e93f93860067ba369de72ec3dc1c8e9d08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-fafifug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ee67a15555df67663f69c7cc5e7828f83d7ea6f9853936bae01977f65f4b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cwimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae055425a99dfba27d814fea570ca7272df9a52298385c10929fc126b6a2a244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2586fe55979c4a0e3c583a3323bef75b733b88c2709bf02b845b0fd6c73e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uthgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d5540f0b83deeb125d6796db3e6d0d52c2c6873fdfba379bdae72536f52f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnygyyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cf5e6263f7adc72f627f2796ce50de1a72dd474cbf5bc9d31d9ffde49f5928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbavuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b6cbe51e165e05248443dd811b1e6abede4597e8d8f377335754987c12df80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-obolduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72519bd44dbdc96d57d71b3b1969bf25dcbfb2daf2772ba5760475c4e4ac2012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-oli-abar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb3efddba964eea0aba376037d810fca8618592af3f6575874793d7a74016e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakiugabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ced8477ad96bccf986313bc37c6914b558d9c6b9adaef7bacb48942e2f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62f2398b0e91d39071d20a1700542e17681b655a78ec4ffb8e77b249f6ea93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lapikamasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7343e149dc4e34e2034012138695614d673876b2fbd946cec78a013566caad77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...