MAL-2025-190076 Malicious code in update-hadron-rehype-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f35ece84680d14ee5b47b141f5563546aeb735678836ac5514467735a7ed72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186146 Malicious code in child-process-stratigraphy-subduction-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7c49dd3945225b658c5a51f33c18f72ccbb43fd246685797fce72947468f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189238 Malicious code in rigel-miranda-cache-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24d18ebd38c79524545d193434c68697eb21e47a21abb2e7f108ae969d00566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182083 Malicious code in gocay-gua-visojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d5d8668aca964900b5ae8ae56f4ed0b1995e2561e84578d8e21b009b31aec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181715 Malicious code in astam-ifut-dakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f88bdae107f6b9405243475b97807fe4f3518c565f6318e65e55f972d94012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185239 Malicious code in soniec-kat-icfaffad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab9b75d75ac1456e111f4b0b35f265ffd962751bd27a0d8d23ee6a24c09d856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182109 Malicious code in gocay-uga-agidugaufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ba8ff76d9956eff5cf480bcc04f4746194bc9e0d91b4c7cae6d98317af6e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184502 Malicious code in moki-nik-hifdagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d019473dc310698506fc41f2bffebfc643b56a5c19788d985f63e04ac9b2a2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694c1616f49fd58fb03c27620a8f54fcdc6c492cc843c39b09f5e8d55e2bf482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff025389ca146405f547de88d3f7696dbfbcf7a7642286a60b1a799494491ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181418 Malicious code in baso6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01a65223eb44d8759a2d8f5521ff1a2a66aa5855286f6c3d47035d4113813d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-parlub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0decd21a301fc2bfd3effb61c8824c1244cd7678312cc02f887b4bdb854b482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180039 Malicious code in teate-thy-py-bazew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c95c79184e48d9657c3105e344d8f2108328b6bd4e3614ccad50997412bf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179906 Malicious code in lookingan-jeje35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0bb3f31bffb9c3e49785bb6146e2beda7255a8588b791e225211ef22628bb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaasafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af52cfdfdc017263b39290c0e2433b7a7e7795772b3550fe02999cd8ded95d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177356 Malicious code in poglymer-ogihh-agsgifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7b0b7212cb88686152b41dd46978df2af713a97734e90e8c9ba0b6d0eaa270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-avigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b359618ebf761ae22156c606df5d8ffc95922f0613b02505aa4964c114c1947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176162 Malicious code in miusan-fa-neraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d747e0127a1d128d1734c256924bcd09395dde903a4a76ebdb85c8f71e24e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-nusadsta-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b1db4e4f591048074a2eb9e160625ca2a4986258f8b07c92418e001e17aa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175500 Malicious code in kiki-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e605fc86fd02a5f01823754cd6540804ba5ec1cb90850bf11133bec7618d5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...