MAL-2025-187341 Malicious code in hermes-browserify-alphard-greatfilter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30708db9226924c56d46254043ab17828ef65f1ed22ce45bc6353202adddb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-loop-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c329a482c68f847b5078bc7c6cd99a0df89ac2ee483147aa5ed8810a29dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-slidev-pulsar-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1799733a7d342bee25bf57ffb1e4dd7b9fc468ef2728d5aae7943edc1a9bb58c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiogenesis-version-magnetosphere-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640005ea6e048c4bbda92a3a84442171fc521ad5f6261a7af05c49ac3f88956a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185763 Malicious code in bellatrix-axios-spica-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f14019bc97e0f8d1949f5602fee6d12a0badde19fddab0ccb48bfcec33580b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-phenomic-quasar-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6e0767d7d01313ad4931a14f6c328b4fbe8723d6fde7d7228c326372d3d904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188927 Malicious code in proxy-meta-pi-theta-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d262f7cb74cbc02a73246c1079e373c3cf5e367f400f9dcfb0c987786b01dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a39e282852ce7e1528ecbc17b9f2430bd68b98f173e1141742bc92b3117b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181765 Malicious code in avangi-olia-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4fdc58e4ce62869f04c4d53aafbe66b38b60467bc1251d1fdd8411ad6f74fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f947b63055c45190f93547ddd0c9d0f37723e3bed69e803733bcdd42e7af7425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b7cc53acbbf9353d58fe43267fa8d26ab2870a7144012364a074a478f1a5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184748 Malicious code in one-kat-ibuafrfdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c9d264f5362090b3425ac89255df54d8f3e6a7fb7b1787cb9591e062d3c22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181662 Malicious code in astam-ift-dabtauzdami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b8a1d4bb08bcde17956f6757df6d7b805c293982eb66f422ded652f71f9409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b8c921a1257fd724917b4f9bcccbc35f585ea7bcc744938192d9c7bccaccd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iloatag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f26e85323b7a9c8172f0f0c79e84ceba13c9c775c5a1df62a6fcbabb1064d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7e1a0ab7db9f9c6a4425933b1af70de64fb636d3d39e1670afec0379bea73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181414 Malicious code in baso56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a833ae4a262351f395c59dc9e7a54780b7517641b7327ba480dab141d120f98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c0836e589a60ce2fffbcb3bf60273c37bf5de763a7b1d7eab28a3d0b2d3f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181270 Malicious code in @akunsansan0/jorelat3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2116bcc295cdb36b79c0dc1152a23c10dfe80389ba0b840ef99b00f067aa0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-torbes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c1f83c3fcc75797f9cdb55af58a64b9eaf5bbe447c9b3b967725dd5abb90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...