MAL-2025-187144 Malicious code in gemini-sagitta-cordelia-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8d2311414e1b1acf4dd1d565d5665bcd08dfdcacfc575f768244f7c9c7ca75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tau-fork-hot-web-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1535674fe21c755cbdb872d3615e3794dce7ac1ab4df9d0b4982a0903171a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186182 Malicious code in cluster-norma-solarnebula-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310edc185150396d4084de6f1966060af47049a0250c939ebd7dfe2899c1f291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmology-levels-terser-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288be03c8843b42fcdfd629ae8d089e419583efc975261b79fa3e9b75d609a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190352 Malicious code in xanadu-singularitarianism-fetch-fermion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccd63704a8837ed8bae59ef565a17f740167e4fc9a2bbf7f4164bc2321af13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186479 Malicious code in darkenergy-google-paleoanthropology-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7840b2d8bc4ea830f6ac0902efab2ed67a3181461cec1cc74a07a7c515f105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187535 Malicious code in iota-centaurus-blackhole-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9edd2d1e8b436561ebe0f717ae927f48886e57234216c51efa7ee60e1199be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bofauffsni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafe2ba65bdffbca4b1c025e2a54ad713667dd618400e18bb0461f202de65a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181738 Malicious code in avangi-oga-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1774b6c8ae2a446d958943a0403fad7685692c18b0cd7982ee99fe932411d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184282 Malicious code in modiov-kian-avcafiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e715ab4c128b12d5bebc550ad7a004922931d7333b93a5e0c0145f62a4d136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185027 Malicious code in sonic-kos-fgiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272ddaf144809d894182063c1348b143529b10c241b2ad070cf5805fc689fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184951 Malicious code in sonic-kas-fagiufafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8010dc26ed34565dc89ea8cea1ae161e32b809f95c5bcfefa761b2ef4ec5412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-ginuosgimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8bac6de78cc5e2d25bb0e42062e7abfdc5a070726981c0ae5614b38f407ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184835 Malicious code in poliaoz-aiksgsdfo-alon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c30f0b6f20cc35b602fbe7872a2b8e6a8cbb405355a482cb3de1546766b54d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrsettt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8191cedda4515003228f4e351e32614bc6cd65adaa9a0080675200964b3dcc90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184015 Malicious code in mitoko-on-lakiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94aa6220b436ce68be19175912563be9c78a46414ef1ecbc88430156314d46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-lekdiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8851ae4b11735b570cc4361721e50075ded8cb4c0e1250773f4c09b10db4270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa04a3b205d7b1cdd19620133dcbfd544f0825994a02548c304fc68eb365aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsaghoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcc4858c7f45d041ced19a6aa61662875cc4c9d9bd0258bc56532f25d7bd162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...