MAL-2025-186223 Malicious code in comet-publish-palynology-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7e34a4137722c68664332cd34c502192b118ed77c8083bc8e26a617829ffe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188637 Malicious code in perseus-xenon-grus-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dba22527ed8f27d29b6a277c13c56373df6604a117eb21a0e723a31111238f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182079 Malicious code in gocay-gua-visagigojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082c48a92d97c7e0b955dce7297fb2a4a7a633d356f892edd79e22600c057e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183237 Malicious code in kisut-difg-diwfzcfecda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f05aaa2f8a3f9e27990c27687a40881e5b3f9c451592aed0ebd53338dd8e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184110 Malicious code in mlokok-lki-hakumjisubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068cdd836a22c851756f619127451b359df8687d83422a3a0d09abaa12362e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181841 Malicious code in avangs-olioms-nolisfsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756e6f297bc8738ecc787a94b85658e732550d12d1bcd2b9ceff95ab95dd52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181261 Malicious code in @akunsansan0/jorelat13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb9d30d647cfc34a706e731873063c7c08739b35671169b6ad515b0412d8ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusia-nuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1e189d8fe46cded8a4786ebfcaba4c4bd01516ad426bdc28d8fc08bc795e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cb929ab2e8ad77bef2085a6c33bbd80e43a35961f388ea2b9ca6dacb05a70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rus-setya-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e871caaad47eb0e25c1d8481d75e0e9ea8af22450cbfae126eadc36c1dad41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175113 Malicious code in kapo-samnu-miavava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62df93ab0efa54e015b84a3a9f1ca79351f75c27f51c26d1691a5fd4f6b314ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdussamad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eaeb9bcb61418585a363599a87784cca9e057ed4bed8758a52e109043ee8a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipie-arammia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad471f9a75e03aa38ddfd6829b6ad17770cbc23e08ac393d1f493c202df4432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/arhl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5115fc993f3306cfc668b25aa138c128dcc7202498753b112e37684ce7213f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9096923524cb911a6e69b0ec54fb2876b41651fc61480b1378ad238ff596468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasd-as10as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e115af794b2394611505c7949e9641e6644fcbe1add0f10c40c46492b75f09aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aivamoba-iufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9890ad6cd1bb9803e6e02605c23bd00401834918a9875edb0a8f151b6c500e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40987c53b028e5193eb2ab0eabb9da4ed6590685a1bd511cc319230216ee751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150299 Malicious code in @mipta1/usir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b4b7332b1c567fbb372249e311f6850b91e1a679e62c0530e49f00ea0b3a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-mansis-nutayirop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b75cfc197b777b242250e6bf9aaab9fa59ad2dcaa6984aa7942e9d788349f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...