MAL-2025-189768 Malicious code in supernova-phylogenetics-terser-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869b9375b776171d4f47ddce1c89cbe87af6fe96e7a7980e9ae061b7cb416a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190095 Malicious code in upsilon-sandbox-static-module-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e533630891122508e162c5d422726d9d4e5f8d60c5a3411fbb538bc10a3d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070457662d9e722929bd437d563898e0d14fcf904fb8850ae35c587e79ec6fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ea972e1e4f3a4f1ada421e9c08f37bdf0ef96b780c4e0a0f1a4b70e9e1af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnfaiyugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddefdb83d59d4f1a44c0d9761c90906271b27d395864a7c3f24928805c32044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15aa163a62b502905eaca5f12c98831e7ac399b48292cdc9ae2f9fd500a3e1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygugjkolujnri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153d01550968bd9b988141f40b0f94c1818b72edc502209839d1a31230ae5cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adibal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761e1cc77ce5ce1834363046303b894b962fb9a1ecfd7427dd3c8ef13fbfc41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavugim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5234a4f70088802541d2712233078e3f8e610d790f1d4cad5ff036cead5e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26689f38edce438ae7b18ed3f3841510cd5c01422b7825f5ac519d3acbffccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpojozakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0528886ba111bc4f5482aba0786589aab3be654fef844b828281df49ad7d3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisasuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba70864138c80b55f95dbc4cbdffa6951c1a6fbcc87745bbac17f0c1b63177d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kuu-bofauffsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dade55c9b4f7e5f28c43b2bb1af19f56fe5e43138cd65b13097b6fcb67f438b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184361 Malicious code in modiov-kihan-afibd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40eb66214c610b6f40e61955927fd30db221552a9191a181131386f98160ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184131 Malicious code in mlokok-lofeki-akiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec1e2cabd735ac524a717139bd2699a090ebea49b13f00397149cb53b814ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184391 Malicious code in modiov-kihoan-afmcaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4ea60d1f24604f9b4b0e7279740dda50741e15893139803cd4028b3ed27f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183137 Malicious code in item-atim-kubusiumabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0797b93aa2dd456158634b862e21a9d6676c679477d9d41a3ec639626655fe20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185003 Malicious code in sonic-koig-tim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ca3f5e850d8bd5c3531b1c5d280ea40fff6a18819abc720d1774fe97c00075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182324 Malicious code in imodiov-kofi-cuaucdocavggl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9699036ccbd1364d9f4d05c179270f1a9a53cdb6eb9ff462b10e999de41cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183471 Malicious code in lobac-ubg-afdmaaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64f126f641a0180e331d4bebc9e2515772d41b468bffca8ed2d099c152b0760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...