MAL-2025-188735 Malicious code in planetology-deneb-betelgeuse-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9e76fd68dea4a218da7554c4a828cd8f512e9399f2f98a6ba89184f1e1ac45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186534 Malicious code in delta-string-enum-thread-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdaa218fcf1da6962e6363ac39a9737390e281d97f094cb7660d1ec9e6b733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188831 Malicious code in process-callisto-superagent-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b89bfed12b339906f993ccf93fe8a767aa4c8e542c6cd156df2e24604d5872d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow-promise-delta-root-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978db9873fd5163d504d6dcef0b180a56a9a49e2c99ee402c0549f5d2eb165d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b59e4c28d8e43ff52b161622de727bad25057dc092564db627f4a12e58a18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4ad60e61988960518fcda8bcdbeeb82eb18575c188daff702513fbaddc1232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asitam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758e831fc8d54957a107d71b57d6b783bdf404dc9e23b490504dc63550302ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifukilsit-daiskiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c492bc63cf31edead58ae9e307ee2f81a485abc6bd892bfc10f71645fd93d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-if (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5692a93f7c8727c0f72cee1e3ca9c2a9c03af8c1ab0c173636c0ff6dfd2e300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315906dd4c81266b4b476d40d475a471d83bc7723d47d7f156a29ca9331735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756e6f297bc8738ecc787a94b85658e732550d12d1bcd2b9ceff95ab95dd52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagiajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb16cb3c74f751bf99c6b6d2b78ebfaea9dd75247ef575ddd326142b5eb8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusuiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e410b3470f44d7bbb1add945a9e8fa06785b42e6f7cc8342cd8238306821e257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuamnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4123cd92701bc7f3b78afa1d259cafe4c47f81d88223defae0282bed5b487d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakinuaoabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6587df879b09b3e3d1880af4eadd68bd7a1c79388874957d2939be4166ece9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef05bff3e2e070d80c5dfe58e23e4307a18ea4d7bf22601ed8856507973b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6de0b6cb4cf167a07e37459c2d2c58d5037260698285a2b7aff74ccf671cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavfcacvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92e3274e0253c8a04729533f498b5d67c4c7d9fb340a23fe69788e9421c48fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-giimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f1c861a01e0064124ef91f6027ed3f42a19a2499bd487929a89bf829c3aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-giossiosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b439362f1dab8f502bc68f9343a51dd556ac3ddbb44a4cf0d3c9f0e66b801764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...