MAL-2025-189550 Malicious code in small-web-encrypt-grep-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a81fc5c680cfe648386bcfd84c9ba774b59c64cb8dcb286e9d2b4ea9547b42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187167 Malicious code in geomorphology-astrochemistry-alphard-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206b849dc5689a7e5c43f5c73d619dc09d9bd8248ad29e5e4a9c7beb15c96102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189792 Malicious code in table-link-chi-grid-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981463794049a950f7aa4edd8fa557b85d449b3de90abcf4aefd078e49d513b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-auth-jekyll-ionosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ad4f9df284c5088fa33be03291602f134c74a08bde68bd1d24c3220134e5cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4ad60e61988960518fcda8bcdbeeb82eb18575c188daff702513fbaddc1232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asitam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758e831fc8d54957a107d71b57d6b783bdf404dc9e23b490504dc63550302ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifukilsit-daiskiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c492bc63cf31edead58ae9e307ee2f81a485abc6bd892bfc10f71645fd93d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-if (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5692a93f7c8727c0f72cee1e3ca9c2a9c03af8c1ab0c173636c0ff6dfd2e300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315906dd4c81266b4b476d40d475a471d83bc7723d47d7f156a29ca9331735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagiajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb16cb3c74f751bf99c6b6d2b78ebfaea9dd75247ef575ddd326142b5eb8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusuiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e410b3470f44d7bbb1add945a9e8fa06785b42e6f7cc8342cd8238306821e257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuamnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4123cd92701bc7f3b78afa1d259cafe4c47f81d88223defae0282bed5b487d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakinuaoabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6587df879b09b3e3d1880af4eadd68bd7a1c79388874957d2939be4166ece9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef05bff3e2e070d80c5dfe58e23e4307a18ea4d7bf22601ed8856507973b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavfcacvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92e3274e0253c8a04729533f498b5d67c4c7d9fb340a23fe69788e9421c48fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-giimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f1c861a01e0064124ef91f6027ed3f42a19a2499bd487929a89bf829c3aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d101a618a7ba068b27581dafecb570667e436fba7e4643a4b4cfd467407f0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafufunb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e740cc80f03476474c2992128702a82fab795f02dd97c7f89e09519374113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugkada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8679e666830f5687e451925b474f819c3545093b2204abbbaa8a8bb1d29efc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c94c9daf1d0b0ebfe2cbf1b84ba8e05facbb2357735a7e4ca67ddf9cabd391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...