MAL-2025-189914 Malicious code in theta-air-char-import-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6554dbada648b16c3259f41ed32bee5cb2e64e31f59ae3378ad2f37ff181bc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187910 Malicious code in magnetar-paleoecology-tectonic-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd63a02ebd57584debf7685bc69f9275d88b6ca02b76d34b92344e2be6c0947a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-rimraf-version-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90c9ce759c2ff105ba07471c175f8ef3973282b1178caecc178aeed3b051da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190424 Malicious code in yaml-entanglement-radiant-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da11391afb2e291ea7a2a769eebd51fbbcd6def6acea5a2870be0adf561196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189750 Malicious code in supercluster-neptune-juno-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7543532318ae7b6ac85841586a5d5d482e3cd78901b800e164aa8ddfe9c3493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-passport-janus-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f11b68e3638d03fabface74d4eade1bc5f8df93eab7c0a224d47b29af1d9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-dalimkunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6011c890b389e1e1a0d7ee46fe730f0ff3e13300f6d3505d75a4ea4405e3e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b8c921a1257fd724917b4f9bcccbc35f585ea7bcc744938192d9c7bccaccd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497fec8798263c93aab0cea87e6ac71e980c2b8043b2bd4c0468e6637c39ba60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef408d2e90f68bbeac7d3aa26be4c7cda8dd1f14c5045711d147046f245fe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-adifilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc62c47e2d83b3f8f07afffa98b858b0f25f47d75faa8e4429b0703d560acd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoldai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da01fc76fd9c43d237e1a120804971c39e4982c9fc60362ccaf5467e591e8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181666 Malicious code in astam-ift-dabulikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6f2f5ec58d3f1972b2e29651365a51c1c55077e2500fca017fd08c49c8030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184625 Malicious code in odasv-knu-bonij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38e2d522814157fcf03b92e28a8ce9bc9da548ad69619fead07d51e6c33df3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182071 Malicious code in flights-tuiga-alukaumaibivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1d6b531a72de105e77f82f3bab4ea0720def32836615bf051ff18bcddf1175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184949 Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisasioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64449c07366674504895aa2987a3546e7278caf5847eff47635d1a5e27ce1115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-onmi-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43982350be1a35b6e54572e823537393d0a39287ab74787dcfa14c24aaa72b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuamfifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff056748d06beca965ba808bdfd3c0a8f0a388ce194607a564374147d78a51b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489a9d24c64cdf7cf66536dee312477396bb4050872a42a5dfa0dd511269caf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...