Malicious code in blaze-transport-genomics-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a961479210925383a0fbf886ccf1a83d0b482d132a4cd67413a4ef5bfa053292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189280 Malicious code in root-rain-catch-sigma-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349fa5e6dccd1932baea7494697034aa3d9214462fb6016ff5e68a1bf986fb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187484 Malicious code in innercore-magnetar-xerxes-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90a43fa256d202c4b4ee74f02897d32a09d8ac876f289dd3ec2a3b0b4255285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ivare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aff9f5c9b4ab2a3a130e72aebbf5919a699534b198b0e8c105c00c040887080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nafuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05d37e73c5a2a7863f6f9f091f7802dba78392704aa0fc0bd7e669a73d7214b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-avigpadg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c31056aa7c9fe5ae1b87001687d34695b22998fc60429b3b5d3324b3c43ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-utudru-uyia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd8fde52ab078ddc24d2fe29f581f018bb720e966157b6fdf8ddf1878469062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172636 Malicious code in @mipta1/r2seads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4065dd1a960c3fb93d4e52b6d8eedf94014df0020f347fc1804019456563da0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171316 Malicious code in horizonhero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9466f9f14780bb768415e4045e78a81451257b4dfcded2df21a275012b666cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea-osss-miuyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31071dc820401260d2045a86aa93867e5b39d637022a24515bfb5c92f5d03b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61be1ee728625253931eec5158f8508abbefa7cdc984203f9c922c6d50129393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c20176d6d71659bf52c2122fea68b0cb9cc6f2fea0ed14b2b870bca28abc85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kore42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39dae43dc839d3bc1bb12d16f2dbf4c2f88261322dd0a67ebd3660f1a01f630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yisaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed91f32ffa1a9c64b7a7df3ec039e9fe8637a76ef322e09bd2e9231ab0a6ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7955a5c1778386e8418610fb7ee34d208c21ec31bef4cd2ab5ede94fd843339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165349 Malicious code in sabua-muhay-tadugfagmafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59f9920ff603f17b9bc57849a5efcc56a8bfa02a3e9113e6776da11384f21eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156292 Malicious code in ilop-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d6d253741987c6ce03735fa226dc07885df2f7d3ea534f51957a4c1a9a4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-andromeda-axios-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d7d8baca28556fd3dd98032288246232de178e0815872d5dda419932b7574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139398 Malicious code in antares-comet-miranda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a504071551534b2eab18488bb8ea664072183edf0e457860d5eae61d4633ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...