MAL-2025-188502 Malicious code in paleobotany-perseus-draco-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e95a9252255738e39fa00227391b21d62088949c92c1eaa51e5d55ca244ad53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189896 Malicious code in testcafe-jsonp-lyra-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304cb8c0a4bc6028d7409abd3438dd2e2e32758c808c2e52ddc9c45829b586ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187626 Malicious code in json-miranda-karma-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e21153db14daaf54497f5b3ea3e6b717421a572780efa5d938efdcb121cd30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184323 Malicious code in modiov-kifni-ufba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a61e37b6366d96073429207673033e7ab9f69a0379c2b993d1b675d8b2d636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184975 Malicious code in sonic-kg-tifuacffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed88920420a3610cb980be501d90deb726b03c8e29bdedab64a062ea3adc7d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-moveda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775f95f498a5c29888ec3ae0a93073a516c1768a321edb60aa8a306ff9aa9772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufaibvafuiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9740c35db041af198861d1cf0d5ece11355782b107592e0b410f2e7311bdedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183378 Malicious code in lobac-ub-badadudcafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ccab430dd32141b2ebd99d9b7fc655e24b0ae51e5dceb402eaf224025a09dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuuloltrjyfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdad8be8884202dbffa1a53b878be473531d6178a4ea8cee608e9731596dcbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183227 Malicious code in kisut-difg-diguota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b31be14540474bfc673070ae1657d30b80558ca27f03c5dfcaf6790b2a6df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184794 Malicious code in poliaoz-aiko-avuhuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71a11bd93f13433477226e847092a7a720e6f4fd1d20f8143f8826e2f9cfcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182753 Malicious code in inda-foji-gisagun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c55405319a243dadeb48c0ddf5858756cc0eebb7df3600c25c86b98c781e755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f27a7a44550230ee77e6620ba736fbac13c79a343f8c60277182dd020aa7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496831f1173e1f891085affbaf362424dc416d7b9a02fd4544e117f722bcdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5308483778ceb44dac8400be455f0bb940251f5b0b5ad8a2282f401f86c0c53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184732 Malicious code in oloc-yg-uhitaggadtusafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1b2bdb9819a6b1f4520dfd42ea8333c774eeaa903f2a6c861f3d08c4f5f304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182102 Malicious code in gocay-guga-vivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ea120fa46b65790f471fa3f1560ec34a5c9506ede7e7969931bd1474efdf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183205 Malicious code in kisut-dfg-diwfzcfecdavcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c107391f4fae6eac63952ab8b98da103b0fd585a6f0133161eb36b0f8d4b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2994e50808305049a3ed4646e9b50d3633e7a856598ada14ed9983d993d858c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181251 Malicious code in @akunsansan0/biru7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8df5d4392a1eb21f5f0532a8a421ad7b3337517acd6e2baa43534ba14ea6530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...