MAL-2025-185750 Malicious code in barnard-soap-gravitationalwave-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fb6bb311abe39715f83590bf71d33b3e1f29c30ebcd134a8d514362a9b9313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187911 Malicious code in magnetar-palynology-uranology-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd8cb005d3b13b23a50a504bd007171a1a10b97495979bb817020abdb259373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185480 Malicious code in antd-style-loader-miranda-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3f4f91bb59bd776abbd17036b4b81e568e06959ffa1d211ed85c33a064cedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186510 Malicious code in decrypt-sun-mock-rain-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d06f22646305412a369e98d2bca79aa51a5c48223ec3e26e326ab67cb75d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187343 Malicious code in hermes-config-unuk-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be45cfa8332efa48889c39ea7acf947b99ce9fc254f407db0c6e462ae8de03c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190016 Malicious code in typeorm-kuiperbelt-miranda-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec24c5ca0521ea9c00f2358b3fe70121647e459666b4b63da967a70a180982f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187376 Malicious code in html-webpack-plugin-promise-meteor-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b375f9370962cf7ade36a9f7b0ba37a5c08a6101753be1493de2323c71fc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb81084814a3a38ce459fd2b660ce3bf6273b24a3ff1e241b43f7354c56f5433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavumnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed8ac77f16aa69a603546ff70c350dc9d677c24c884378e49f7a61cdffcf99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4c3e7d3ac62eeb6ab3f1a5e5bb661ec39a6b7454209dd1bb7b386668eb510b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avcafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a7860cdf1a398ce8e45c05032718e9b741505b90da3156d24db255ac6227f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggrygbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2b1aac4da139777daa0ae09baefe5f836aae07b7cb82d33cb1d94bb1e262fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-balamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c94f34acaf3c20776dde5bdc736a436d800e0880f196b493b9ae55bd41b9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfgaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dfc4f51954b06518e4f883edd9b9ee4737d9f3ca85b81e3f54070a77074602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesdeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e6938b3af18767fd65bcb77f97c2fbadcdfe0cd66ce75f89ead23e4958da74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-bo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abccd91c154d7a48a02562b3b40b3db648701bca8a3a359c19375339eaa6d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagabglan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26308d8cadb7c2ec9211c1ba8c4ecc1cf0e39d16871d360cf953f18798cd51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47093a7d8448c760ea60c35f842c7e45f15ea4b3b9d0f0e4292175c4c700ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9136dc2b0c9da3cf142015b3163abdbfa4eacf5584fb1f3191de2f1b5b2579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-niluvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5ef6bf42d4bb1ccf98ae0ccca0f13cead9d6d23b4a11a4c33f677e5b211480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...