MAL-2025-187757 Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b22a3237ae7e67de2b1fded90e8aad83a6fa3a88ed44ce7d4329367a38aa5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bd4cc234946d71734de7de7817ebbddc0fcd172fe575711ce6c995c421ce51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kue18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706f8fbf56a490cd42d5ff7839a82ed9b0a848532c712909ed4a2d6d64c54cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119145 Malicious code in cindy-nasi15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0348dc897dc53e933ce972ad805a9de27bcaf966c3e5c27f79ad90f6a95255fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113127 Malicious code in citra-mendoan56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f91690383dd53de2bfe63213a502dc361d5ca7997db1c2f8c0a5020a9873969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108210 Malicious code in round_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a61f39f2b29cc07efac32344b2f8d82b6cac63f1a93f1eb56edaa4e073098c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109849 Malicious code in troubled_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33b2778a80a6e45f35483b4a5b2e9337e6f03cafd06512e6a20900525998341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100431 Malicious code in cici-lapis32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e207c121f842f2395438aa161fa8d95c5b233783db106735d99603a2341dfb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-lapis11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34aea631f29831e09831f3411b7045aacfe4b99d408a76f74a56dd3548510934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81108 Malicious code in rina-sambalado20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0fb99878f6c7418a6bdb2113db9480c5adbf20fb11fb7c57be86a381111c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54602 Malicious code in rifqi-donat9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1173485fdaea9bddb3291e9168c3bde9c42b5299d1bdd836784ce1f02fd6a4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51384 Malicious code in cindy-sate73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89af57ec701014a17291cd40eac5f8d28cade96243c70a96c8e745618fca693 The package cindy-sate73-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...