MAL-2025-188669 Malicious code in phoebe-coronalmassejection-lightyear-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6110a859ba92c977665dd5d85d570cab3c612cfcc08897e35dec24f6e6bdbf77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189093 Malicious code in readable-commitizen-photon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d1e169b74fcf6ff21db17a2bd352872408a7e6aa151fdd40f7844915ba42af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189914 Malicious code in theta-air-char-import-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6554dbada648b16c3259f41ed32bee5cb2e64e31f59ae3378ad2f37ff181bc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189683 Malicious code in stream-ichnology-plutology-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913731d4cc63d076cea89efc175f0b1336bee0af5ed411b24838590cb32612ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce01267608fa3b9c7b026e83872d7936e224bf30e90f4c326a4a6fc1cb9acda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoldai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da01fc76fd9c43d237e1a120804971c39e4982c9fc60362ccaf5467e591e8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faverufadaxix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a327b855c6287637a9def619d9e6715c7eed1c6890d254419c5c918472811df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182714 Malicious code in inda-fodji-gigaafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac10dbfa538da340c168cd4beed2f2381b4d91a8fc1b86f3b37b99b9168b114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-dalimkunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6011c890b389e1e1a0d7ee46fe730f0ff3e13300f6d3505d75a4ea4405e3e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179656 Malicious code in kisut-afunig-amfaaicaiuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe45ff5c8b0396a7566c9a14c1cfc6eb9384b7d998db3208c146cbebcb18154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c1df2726c9b6171a996997df412e8787e6cfd3557a5dc94d0abc1784636971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173986 Malicious code in diva-tugai-ima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7db1fee5d853ec169dcc9de797e485ea453049aba38336796225933db5392d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174674 Malicious code in hitachi-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65605f465179cb163279ea9dd8e053eeab352e10872c0362b06d2e751a10ef07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173769 Malicious code in butry-posiy-iduy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edb3c3fa379408fc03eec5bdf47ac75127fda6d054323e2df0dff39474b294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jamelfromage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271d7894271cf7955243595e5547eb23696f5524207ea6e9fa9e871b104405a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spacesavant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa46ca0f0af88d914a16125e77a3edb186913a7157f510ea40c48e846d12d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/qyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d4c6257c027db001adc66d457f1cbfb14c3db581fbe451d76d10465a69634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d89941ac218749fdce158474b4dd91f304378021b854bd960208dba1c8e14c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuw-tsuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09787bbe9f304a099e70c235fb1ba90da9ae543fb63abd64e9afc5cf3b47039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a12aa0d66e5b1c890849a22f7e05be96006d78cd9d0dcff24b8c413988e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...