MAL-2025-188182 Malicious code in native-nashira-seismology-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727447041b626199e98814dfab93fcda621b58917fdb68844e29b0b7d8e48327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186881 Malicious code in eventhoriz-native-planckscale-cosmochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3fc7db81f4f6607a2fbdcf5a7717de5cc4c1f1f869bb3a677def9b158df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190120 Malicious code in user-analyze-uglify-minify-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c94d0917932065156b108cad7f2e61c6306259a6092dc4552f1a12045ad2f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189991 Malicious code in tree-awk-notify-beta-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a4475634ccb865c954dd93557022a7dd70e0549691c1cc71b59d788988cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185553 Malicious code in areology-darkmatter-ablation-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfc4db01117ee624ad9404c0333c608488382abb48fbb690352e94c3f4e111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185745 Malicious code in balance-public-new-object-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4bc6026cbccdbd46d399f7ad4ad79e78e3f51369f9d5a0619d82b3a0f75f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189918 Malicious code in thread-compile-parse-decrypt-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7146ef933c1aa178443b1e6366208057596a2447d96deb31dc0f893f501187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaivuvaavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2113c557dc2daa684c6a981ca6d9cecc8876915633c7c9214e43321041506489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c871d46320533cf44f20ca6345eee76fb7ccc7602d3ef75e794d407e5859c1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugkada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8679e666830f5687e451925b474f819c3545093b2204abbbaa8a8bb1d29efc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ufavcseqinsdaodatayctaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2428b2fb97ee8dca26fb9b5ad410538d22ff636e015129a2e20789ddc27118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycurptv-auban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0805781d4528c49381044778068a603eaae9430f88ecdd3368848086ab6660ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimianunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f58b5ff7a371511f4fed1f1a61974aff2a1a7de1949a50315c376178f303010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagiufaggafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f4e7cb7433fc4bebedd7ee268a4a38be896aa3cddaa3507912a0bfe1e77d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmaaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64f126f641a0180e331d4bebc9e2515772d41b468bffca8ed2d099c152b0760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-ibifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31379a469ebfc09f8110ece98c134a8a97ee8f2d81ac73a4765624a15196cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-aaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f73621e614fb3c63feaf4177bc8ae9890f8b437d21bae59b357ea17e0a5fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c02ae108d31860db90b1a0afde180c30cf4dab805820670ff7102c739951b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0555f8aff6282b6348aa4592989eb4e4f1c76bb6f7c7e133ac31cbbf6ecd60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...