MAL-2025-189752 Malicious code in supercluster-vortex-blackhole-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a840cb750914a2d75e4627c09a5d65fdf3f78ccd08344dfc9f366053fad4d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186128 Malicious code in chariklo-library-public-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa536a5e403d931475f9787e1461256bb925caed3c743de48b475db4b9bb1938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190012 Malicious code in try-signal-lambda-execute-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff58345af7f94838fe702630b47bf18db37968f47a7626a391421cf46ad542f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186193 Malicious code in code-code-old-reject-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c899170e707048f7a4cca5c47d5b69c5e973289a723f30a8f0ca015ae5d82005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189927 Malicious code in throw-long-stub-thread-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d1911fd1bc8fcee8202007abcb6410966a735e297b3dd98ab21559a2490b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjinhtew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3fcefd042caf68a4b1112755d2d83608d50b89e71c6e40acac5b261abed63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcfea0a4c0f8a5861e494bc6d94770fca281600d82d8faf70168c595be84ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-coc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 231e70af6270496b10470f3c372cf0d86cb52e5626a1a5093d62e59ace831751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iayafucmff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dee116b6cd8d6d4f7d8a3a178c86becfa2bfb6ce3b8387b70fab7e9f9d61860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafufaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d5bb5180013553d541c1cf34abb0b6cd3047f3175bba6ed78b10f4b870c801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakiamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b9ce86e496144f25e4500060da74e11e52fb5139905fc87f615fc1b071c98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ba42ad0a76390f74a368e3740557a49fc79ea968a50bfc6869f61192a23d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibanaivuvihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d042ef08869bf0357da7e811da4259d6dfd98fd252cd4a4796b452de7a7d47a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee188d659ad3c564fd6cd258d388db6a0c693ae1a28a9b3387fdbf881a9329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoycab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a061400c6479097e8768ce18447a2cb6188be5bfe8794aa7ac7d75b10a88ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b671caa2c6ecf037f0352ebfbff81fa0713fa2e4726f04dce1fdbaa23206fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0918062cb52b10b2c85c3ecb368e8ab79a6279c94b248c425b99dde582769b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dc41825423bc5155475bc6a3498a50d19fb4da5da6639d46d057ffe04d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185251 Malicious code in tuis-kjt-garfuaavdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3880a13c370b1264399daeae173a39a5e80a31e08c465cad54d80f60b9460c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182158 Malicious code in gociay-uinga-uufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51882ebf4c438c396f69721f4a514c4e07dd9b7cb0e9de4ffa5fb42209169a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...