MAL-2025-190136 Malicious code in vega-xerxes-meissa-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63abf6534ea99f2d7edbd9fec922e534d5a525a6f21b8ba75ad9525c2a485d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188270 Malicious code in nextjs-stratigraphy-stratigraphy-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b63188f2e4cde710478e23f743034e0ab25624c739497c27f75dbc61212b5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189918 Malicious code in thread-compile-parse-decrypt-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7146ef933c1aa178443b1e6366208057596a2447d96deb31dc0f893f501187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186152 Malicious code in chromedriver-spica-repository-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a4c64a13ccff013904a32793fb2156d58bed4a7842bf67f3e452e2a8eb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185553 Malicious code in areology-darkmatter-ablation-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfc4db01117ee624ad9404c0333c608488382abb48fbb690352e94c3f4e111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190001 Malicious code in triton-radiant-epimetheus-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f37690579c85320317072d9cdc94e1053ebab4d6fe9f33c85656cc0bb9598f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188001 Malicious code in meta-monitor-info-import-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8e3b673a01f373c6f1332b1fd04c1625680572cb0e3311bb3ddee22800a7ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-aggf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e2b07d4c22c5981e9e29cb7dcbd5a347548287d5f6a2ea7485dfa6f6c51c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cocaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d857b8b6d5145d9b7a5908bac252ff27c023cbdbedd5b8e5e27ca1493616ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fngduyge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae4ee65de2da1a72f4a9ecae4393c1589abc667c295e355c67940d3242da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-aaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f73621e614fb3c63feaf4177bc8ae9890f8b437d21bae59b357ea17e0a5fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukunai-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac88554a3034ef8616f2d2a52196393bf6302fbed848d32ff8133860b41fd90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gissi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7e28a0ed941ae823debc038d39afa60a6645d8d86375f65e4b9a8ded45c968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadadeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea19afb2beaf894579b2bc0e2328eaf24c0780c5a1774463f1df91e1f6222b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmaaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64f126f641a0180e331d4bebc9e2515772d41b468bffca8ed2d099c152b0760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugkada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8679e666830f5687e451925b474f819c3545093b2204abbbaa8a8bb1d29efc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183577 Malicious code in lomi-fus-uga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f461f247f76b7a3ddfa88fd0899201795776834054eaa8aae013f6ae95c911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185322 Malicious code in tunis-kt-gahvfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c871235e4abad00191fcae3c240fc0421804b1f99ed7e4bdf10de275f2060ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183070 Malicious code in item-at-labieagyeyoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c42678231158933a01b86a9c14491f5c68ed58c8190444c13145a064a39ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-ibifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31379a469ebfc09f8110ece98c134a8a97ee8f2d81ac73a4765624a15196cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...