MAL-2025-190352 Malicious code in xanadu-singularitarianism-fetch-fermion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccd63704a8837ed8bae59ef565a17f740167e4fc9a2bbf7f4164bc2321af13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186479 Malicious code in darkenergy-google-paleoanthropology-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7840b2d8bc4ea830f6ac0902efab2ed67a3181461cec1cc74a07a7c515f105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187535 Malicious code in iota-centaurus-blackhole-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9edd2d1e8b436561ebe0f717ae927f48886e57234216c51efa7ee60e1199be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bofauffsni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafe2ba65bdffbca4b1c025e2a54ad713667dd618400e18bb0461f202de65a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185027 Malicious code in sonic-kos-fgiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272ddaf144809d894182063c1348b143529b10c241b2ad070cf5805fc689fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184951 Malicious code in sonic-kas-fagiufafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8010dc26ed34565dc89ea8cea1ae161e32b809f95c5bcfefa761b2ef4ec5412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184282 Malicious code in modiov-kian-avcafiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e715ab4c128b12d5bebc550ad7a004922931d7333b93a5e0c0145f62a4d136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181738 Malicious code in avangi-oga-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1774b6c8ae2a446d958943a0403fad7685692c18b0cd7982ee99fe932411d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-ginuosgimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8bac6de78cc5e2d25bb0e42062e7abfdc5a070726981c0ae5614b38f407ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184835 Malicious code in poliaoz-aiksgsdfo-alon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c30f0b6f20cc35b602fbe7872a2b8e6a8cbb405355a482cb3de1546766b54d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrsettt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8191cedda4515003228f4e351e32614bc6cd65adaa9a0080675200964b3dcc90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184015 Malicious code in mitoko-on-lakiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94aa6220b436ce68be19175912563be9c78a46414ef1ecbc88430156314d46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-lekdiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8851ae4b11735b570cc4361721e50075ded8cb4c0e1250773f4c09b10db4270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb28993cccb850bcf6313dfac8842d120469c9610183e7af5cbfb8164b306ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa04a3b205d7b1cdd19620133dcbfd544f0825994a02548c304fc68eb365aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsaghoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcc4858c7f45d041ced19a6aa61662875cc4c9d9bd0258bc56532f25d7bd162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173109 Malicious code in btuis-suinana-mmavmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fcad2e73812db881ad22b5894479c0faa7a3b895b0839d8102fd91860de37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176145 Malicious code in miusafadn-faafuds-anaeraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a44583ba325c6fb7f5262e5920ebedc3c16842dc4f277288833dd33229ef615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178839 Malicious code in tauhur-sofi-dihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252d8da77df5ed5ad3b95cc60c5fca6078c21f34b56525684b1e180d7d490b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...