MAL-2025-190114 Malicious code in ursa-process-query-metabolomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9eb276d7c42a3eb8d32f6a4fd0ec8a87d3a091523a686fbe495218f0f56f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189850 Malicious code in tectonophysics-sequelize-whitedwarf-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a418c5c79fe80c62d72488d51e495118660bbfd475cdb942da5cab826ad3c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-ibifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31379a469ebfc09f8110ece98c134a8a97ee8f2d81ac73a4765624a15196cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obos-bimabaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da80dfc6a0240a4247a11b4af4b5d356c8211e21ba77d8913d13cf0554b153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53890a966b324c94532d0d4d4bda7de02cc717eca2172f260c912b79f0ca9bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182456 Malicious code in imodiov-kufni-coca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a56ccbdf8fa4517c3e9db59bbc788c1f919ddf098c5063fad6e34d5ae9462f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184717 Malicious code in oloc-uyg-ugyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c186fcbd763d5b35cbe7eb5aaea4d4df7a4250c207ed4bfd1235e52b8a02faf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182042 Malicious code in flights-lutuiog-adiilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc77f1cc0b40d4ed917628f2ed5f1b9a95c9ee1727ae465bb6a3ac6af5030dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182477 Malicious code in imodiov-kugfi-comai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac79508ca47a94d55c4cc7547eef66fb8725376a30a481ed213b470698e7db8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182348 Malicious code in imodiov-koifi-cug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbfad4fe7e9f9f7610e4d23f4f154a69cfeda95b86110858167de9d640fa3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181963 Malicious code in flights-lutag-idosabhao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e879cb9d009d6562bae99863c7ab896199779961fac7bfabf1f0ede655fc545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagiufgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f700dd8afe8ac7eb70a6e257dea8a865e8e96c4a1899a07b7c462ffd339fdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7855dd702bdec2e4e6ae5894411aa79c1a842fd4a44ac44b8161942cfa4dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digokiuasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc3bf05f8b50186b3e3638a3f34b2c359d3b4aff6d477d8096c68c10c1df84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a11b061c1c0126d7a376d4897c36d2d588630694a3022ad3f6a380efb8d010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb983febd18968a8597732bf01c611ca293ca69c6a38ec0b596c88fa6ef2550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abufavaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 551c9111516b8c7e362f36e4065c8e00809f68b8612fd9ee8e7ffad840a2d2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-aggrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d934b529a34fab097759ca2edca5718a4a269e985d3338c92d84fe51d01b8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobabasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639db57e9e3fa8ecfaa94eb104ccdb6a9a4b7107babf26e75d174e68157bcab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87a26921ec3a2ab556ee7ddfe66b5b407c1b8f7aeed8eecbfc79c54a4adeebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...