MAL-2025-186057 Malicious code in centauri-xenos-phoebe-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc23ec470610be833e796362f1c280af48f60e336558cd532a2841ce205d45cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183129 Malicious code in item-atim-kubusibika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8f98a5eac535174fcde9b2c56eca83c80bc1261e1babccbf03b123ced4cef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavfccvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e23cf9ade965eab7582bc5b9b35ae77c5f520316edaebb50e48a752891e388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-imare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fff414ee6d29f587f911b18c3adb8c53ee74da59274e2fe239594ab36971aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-vojam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f16926038c57b3803f2c282a23f9077ad98ae34c8a4dbe84bb7abcf74cdea8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gaoif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308fba7e2a2f73466f14ba8d3c8a9f862431065b9f20e326a69aec0ac85f8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172933 Malicious code in anidata-hauli-muddisfl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919e7b10aab33a83d7c75ff1d99182b7d491772f509d61cf74ea00350f0f2f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c5167e0343f471aaec03094927cda57a3f7a94294bfbe2d221c42189e5b5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-namuda-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250084ff32ac71c5360cdfb3d33c6a983966ef4dfb4583266ccb5b9f5f44fe81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-taa-t9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b7e8fda7f209fcec371275addeef1f19cc62469a4c0b775ef0eb1ff19470fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162652 Malicious code in nokire-kilua60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad65b23420de0a4f31f1ef043e05341aa84ceb3a52c4248120aea729b02ac1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167021 Malicious code in teagood-lokina55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23b263e656c5643c50aeb1ba6243cdce8606ecf4a1dcfc1b85325345bcdc04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166475 Malicious code in sunderlan-uyud-vamaiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a3a96106f2e8ba5d59a253a46cae14248fc1cdca29ee0a89b033ed4473a705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhadafsfufi-nya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67cfff6f179f0d1d183f41e87f27e1b79601dcd57b0b5fc13a1bc1fb033260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167448 Malicious code in teagood-nalikami48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39497b012a854d9146fd35ce8765f0cf3cbe02faa1243f9bf830f8f4532f1263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166949 Malicious code in teagood-lokika80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83d181d9bceb5770471b7cc0838edeb19c7e3d4382a4e6f48a7c5ea8672efac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152475 Malicious code in alvira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceed1a213f0e85ca4c3d612060494b99514634b633698519b451f26ddd8dbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151091 Malicious code in abang-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775159f8f3b11a40e14196e2f2ecaded5f6eda418724a1988a023c49f22c1b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c902c46bf0c30784c829895af6845390fd646c7235a7bdbdd709ff24cb5d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276ba3dc59109ff8b050abb12095e877255f064e4cc741209afa25db1dcb8051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...