MAL-2025-188516 Malicious code in paleoclimatology-paleoanthropology-supercluster-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114299ae42480cd8cb10431aece2c344ccac5007ab717c6b1ce22ddd17a28a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187313 Malicious code in heliophysics-pino-umbriel-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d13fa24ea00cdcbb15ac488921f9c6c192ed00f12f1b47d659992b4fd4f4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188944 Malicious code in publish-airbnb-changelog-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba327f3344b387071a4396d178c7fc38bbd4e9fa76c261ec5c8f657092af621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187729 Malicious code in leda-command-aquarius-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b97a5b24e9f1c261d1603afc2a38bfe2203106a11ea4b09ee3b7341b64025b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188118 Malicious code in monitor-data-uglify-compress-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fc316f02dce0d561bf90ab32d3702a34a86ddd60eb81d8893367f9b0125e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190402 Malicious code in xo-castor-frontend-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075c29e54a9911238abd8798bbb7fef42b22c93a5a8aa1a39d9fa0bf36cc7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-aloin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9200293453d2e5c3e34538b0137457195ae9a0b3e2bd39b87c9532742c4a6705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-bba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae054998aa18ff253d9702d18f41cbf63bde4361706f00b4a71f3ffc53a17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololghyhbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744682a32a06e19441414050cf63c3caca95cebd14f85c3c1a96481a8cec0964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f97f688cbd4c34c24a563c157919f62215d4784fd874cb0b313087e228d7b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugafih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288259eb6705a661c986f6c6ad638355875fa79c0d5af2a9b874c9b4d41b1f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2327f8675f5419c53a777b1c94cfb12b5ceb8c57aea2cc1a41f58ad82a589aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4696f5497362a28ffc24161db611b2c81f11e180efb4772e3eac3d25aeecea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baufbav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056fcd6ade17a0c78b17b92cc5bd7fde37aacc7e355aa349e274087669a8866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daicutafamajjauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb69aa6b41f2310c1a8f21da915adf2ba9c9e359e834e4aa93c3d34616e5f1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafuifiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2754226febfbe72f3b3f8d03a73ce426b070c7a4035ee8ba8d1b7aaaf7028202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c02ae108d31860db90b1a0afde180c30cf4dab805820670ff7102c739951b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497fec8798263c93aab0cea87e6ac71e980c2b8043b2bd4c0468e6637c39ba60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imailok-ofe-lanaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4602e65ff466c48ea9eee6a1fcb03fc6b6557f27eec830d8211c165261da30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudvitifaafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff297d65d751a52138277f3fb88404b45b18f25e3f10c116bc4bfef62f07e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...