MAL-2025-186109 Malicious code in changelog-graviton-hadron-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4654a7b3fbdc91ef9d6bb9b21a92ed4ef7c06883f0343185ff0493e3af578e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185402 Malicious code in air-minify-load-secure-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-sedna-nebula-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4823bf41ec4a01879644b67982d2191ec56200286016f1e4a400b8bb207c878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187484 Malicious code in innercore-magnetar-xerxes-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90a43fa256d202c4b4ee74f02897d32a09d8ac876f289dd3ec2a3b0b4255285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187995 Malicious code in mesosphere-query-dynamo-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade0f9fd45452062aac0899a4880a860ceef294caf0210e74d81e62b34c6889c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186219 Malicious code in comet-orbit-umbriel-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ebd8148bd5f35738b7a83182930c3eee2f0343389f023bb854c42d9ee86047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokmiuaanla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578292431351e4fd867d5a2d6f948960e6b88b66634e58f04b7fa2d9c1940e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civasavm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae36bf735b691bfcb2cc9f1c00d426e2267f073bb726b8a312c39bf52b1573ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasavuium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0655f7cc1a1c1137db7d4e3591f720145f3ab4424b378abca43989fafc64219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufagvuafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2667b680708ed29a01886e425667aef746197320e9e540651960ea2a904c319e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184492 Malicious code in moki-ni-hujikakibalabuum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885c357f7dfe1d399acecf9cb8215fc1e9fc6a07d9e4a3ac87fbdf1ccd1bb56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184441 Malicious code in modiov-kin-afbaufcaducxacags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea7649776ab28ab7763b91a79915c95bd48417403ffcf0dfb410edeea328d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181285 Malicious code in @akunsansan0/karedok16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89bb9f64248f16b8da630c9dbbd2dd15ddcc3cddd96ec4fdbb4fc0c4045bd18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175391 Malicious code in kapvino-somdf-fidaabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed2da72f8b31330d00d9b881fb3c062098f016cb019bffff45bb8d2c56d13e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc3d96d73faae58cfe1ac3c3892e8944714686abedf9ba9013acc779382b03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175184 Malicious code in kapvino-socni-fuvdavaibopva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507a8675f09df9d7b075f7eeffbf0d3f3dafdebec1a86c3adb20290e724fc594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173096 Malicious code in bafai-sunai-cau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13206ca7259bec1e28641be2d45d13561505b35c131478a4406861ab7f2e10a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179024 Malicious code in ter-sohyun-srasav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7999bf0ad2ff8de5b5a2d9e1a2819dc569eba14778f80c965b54d0e530563acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173178 Malicious code in buis-manuidais-btayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010731b92fe2357c59a735fdf905106d294b81aefb4579acad49cee53481fb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in williammiller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26920a36655dafd3fbdb2eb6787ab235c9c9d827bf04514ea7d906b33ba3b4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...