MAL-2025-186073 Malicious code in ceres-petrology-callisto-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef236e8eb1b727325a3aa33594675cd45f7056b4eeb66de2ec6f4c3717e7eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-cosmos-resonance-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95e97f651188e953913cd0aa5f218e99332b565f20b2a3260e5b791bee3db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187409 Malicious code in hyperion-capella-auth0-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73e61530abddf10af54e4b3e7e468fb6e763ffe1f4059aec6a0de811685b393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184824 Malicious code in poliaoz-aiksgsdfo-ahksgasifsdusdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421810c901015ebdea82d10b419581d6f67d4035c978b82b42d12285b7f5081b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b5ecb542a413c9b8b727f4bca98f634eb0b792f47d6522997f486487b947e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185104 Malicious code in sonic-kuig-tgacedcuadav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ff20a5fb24f88e41415224033cb0aee6107054aa35b94e9c9fe191df5fefe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182559 Malicious code in imuay-aig-iyucayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737f9299ee0d4afa1b181be215d620d69fca643851cd5b19c8cd226811472892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labiokapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19648c7c98331724284fefdf96fc1b85dd997677958e4339a1266fbb56519de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182527 Malicious code in imuay-agg-iguqakuidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4647f7b9158e9f36749c3aea9b1b1d1445b5ebb906bd6e8b158db6910e7b6d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a2287584f89922d56c4b6c5c6ea6ee99ff8e5136caf2a256252049fb3b2916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172780 Malicious code in alvino-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cb929ab2e8ad77bef2085a6c33bbd80e43a35961f388ea2b9ca6dacb05a70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172658 Malicious code in aaabdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a5e733805bc24d9a21c4278251983e46a45ee444adeeede671dc444ab52d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173088 Malicious code in bafai-sunabi-cumigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de4a2241b2f53ddcff0912b23c9030a5a0e39dc6e5babb99036cd1bea83d672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-nutafyadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24e9548ca6d6bb09d6b1e3cc09d7a456e2755207cd0841e5916a3d5ac4895da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idust-daajua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77667d1045cafca6b0a72e389d2c87a9ba0b436bf461a2f685a87cfb8da6422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162044 Malicious code in nasution-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76fee18740bf783e61a7566e81b65eb8c466460daabea77f01da94899087abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154754 Malicious code in diogo-kamoli-aila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4956a26cb08b1ee0669f2d4577cde02606dfbecec89592a0ba4e85a70028d35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162897 Malicious code in nokire-loklok43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d64b75968bf32492fb9594af5d32be9471f0ffed9c953f6ba7ac7255097437a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151292 Malicious code in abiba-avin-aumauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c5c3f1ab9b1399ea424a4395c97f4cb10ee2918045bb34cdb5b4050c587692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158281 Malicious code in lookingan-konami22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfdf38deae25bfce21b6fd71d26e44b516c3468190c10cb15a824974fc70d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...