MAL-2025-188445 Malicious code in ophiuchus-vuetify-schema-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9884ad3402f26f5a8382505851349e77b9da40d9ab72fdef1d8653e7a5ac4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satf-anujafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e58bec6e50ca1a93230a6edb0f7bb711f179d8b5a6fa22ea1df659c3474de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176624 Malicious code in nuilva-avmim-rucopoivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4b56a3173c6c0f57e6d565210062494fc40cc5d2492b7401589f34d19947be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in danielmorgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ddce2460d31df028545c0bfb50f043cc2854fa463acd4d85ffeb96b32c6d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd579852b78b92aaa257610a0f663f8b810150c216c11a5cec153878185d16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alabki-malolosiskaiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69d23f1668caaa8f86d1859b3bc70acd1717a0c8b41c00a190ea39c373fb4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analsia-akifai-asulan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f08b8be5d19b078da5da32abe515b281d5af494b3b8bdac3adb333418cf8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-ytu-tresud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadde44142b495ec3e491a52a67b66c87f0ec9522e8b41c1ef8f97ee8f83761d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otogfin-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0751b32443f4b5deba768fb489fd5446b417dc2a729c70f8b243fa61d8d3ab51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatira-goadotda-nutardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446942ea06d5604a9cd7af9dc7be24fa8cd87b67eeb96cfe6f0b8a21badf860a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778c6d633659b486d3c1a866b0be9923da4ba229803c5befabc1c100b919fba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155951 Malicious code in ican-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a1e7c831ae6dca400710fd4792ba89aadbaf0dab99dc9fb69e8a8aab05dac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152613 Malicious code in anaislah-paufalakai-asu9aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b9b5efde15d0e8269a1e40ca34aab0fb148db8f5e62908047a77de53c0619a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169058 Malicious code in tehah-nuyadtasfag-amanasatafn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da822f02a1c2659cf408bad60ab5399e4f100c66c342e6e1219d196c9f5ddfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170057 Malicious code in uinsu-ls-din (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6ca7325bb2fd23e8489fa14b3e80f7f422609ffe1e350594a2b30aefe2d6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-draco-local-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8794f6d1882edfc2e26a48be8a5192def801a638744e65a731076bd27bcb8882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143072 Malicious code in grunt-public-yonder-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920769a89fcb827d5b2c803bc75e9e94bde3109b923acbc4292bccfb706cb4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-apollo-firebase-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e0231c97d5ad71e53184aa2327549e5ad41ea6fbe8a1fb8617a327ce0f28aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-unuk-taurus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfd402e64722b35afa093dcd533f1b3ab462eaee11e9b63752f9c321d0bba98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-brengkes65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8c8c65aac2f9a56855aeacc1acd6bd83a9dcb889fea160014c409b1d7d3314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...