MAL-2025-189683 Malicious code in stream-ichnology-plutology-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913731d4cc63d076cea89efc175f0b1336bee0af5ed411b24838590cb32612ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189914 Malicious code in theta-air-char-import-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6554dbada648b16c3259f41ed32bee5cb2e64e31f59ae3378ad2f37ff181bc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188669 Malicious code in phoebe-coronalmassejection-lightyear-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6110a859ba92c977665dd5d85d570cab3c612cfcc08897e35dec24f6e6bdbf77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189093 Malicious code in readable-commitizen-photon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d1e169b74fcf6ff21db17a2bd352872408a7e6aa151fdd40f7844915ba42af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-dalimkunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6011c890b389e1e1a0d7ee46fe730f0ff3e13300f6d3505d75a4ea4405e3e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faverufadaxix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a327b855c6287637a9def619d9e6715c7eed1c6890d254419c5c918472811df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182714 Malicious code in inda-fodji-gigaafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac10dbfa538da340c168cd4beed2f2381b4d91a8fc1b86f3b37b99b9168b114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoldai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da01fc76fd9c43d237e1a120804971c39e4982c9fc60362ccaf5467e591e8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce01267608fa3b9c7b026e83872d7936e224bf30e90f4c326a4a6fc1cb9acda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179656 Malicious code in kisut-afunig-amfaaicaiuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe45ff5c8b0396a7566c9a14c1cfc6eb9384b7d998db3208c146cbebcb18154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c1df2726c9b6171a996997df412e8787e6cfd3557a5dc94d0abc1784636971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173769 Malicious code in butry-posiy-iduy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edb3c3fa379408fc03eec5bdf47ac75127fda6d054323e2df0dff39474b294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174674 Malicious code in hitachi-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65605f465179cb163279ea9dd8e053eeab352e10872c0362b06d2e751a10ef07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173986 Malicious code in diva-tugai-ima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7db1fee5d853ec169dcc9de797e485ea453049aba38336796225933db5392d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spacesavant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa46ca0f0af88d914a16125e77a3edb186913a7157f510ea40c48e846d12d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jamelfromage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271d7894271cf7955243595e5547eb23696f5524207ea6e9fa9e871b104405a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6377e1794c1849fa8628890544c68baf073bbe45a7235bb73cff0b0fd2dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163177 Malicious code in nokire-nana25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bc820b2107d66689978a3c91843fa4de88d0545544248944dd7c7ffd9de841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150662 Malicious code in @miptaa02/flage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30473b323aba80a6b0c48bbf174911390c723281b21aeb732a615332517ea89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152137 Malicious code in akabia-aliga-aiamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da23bf5e620fdbc39061da5a50fa49ad0a05c839b0a89827531b45817a015b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...