MAL-2025-187196 Malicious code in google-radiant-weywot-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c66e0686c4618a725de20e95e6ce1715c68327b6ccc280c359a1139312e4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187734 Malicious code in leda-jsonp-dependencies-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5371fbf950c99d96b08240fa9f1145f24d3a4062427ce516eacafbaebe39885c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185713 Malicious code in axios-envconfig-antimatter-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e13721c20695ceedd4b482837dbb84cd436a7acde3112801215ee490c3c1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-chi-nu-info-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42b6bf2a01b6334b369bee120683abc5377dbaa3c0215c6a61aa6e01154bdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permission-eta-float-gamma-psi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e5c3e216a75b80942fcf38fe810effc04077d1c549528efa5ffad2cd9b8f8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189541 Malicious code in slidev-supernova-pavo-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28197b94becba6d67bbba6f13af761bbe19a54a265b22921e9d85b9b97d1aa89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186147 Malicious code in child-process-xenon-avior-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f4f073cd819427d81027c4347194f2093797d2605e1e90dbf83b1979f7d03c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-exosphere-vortex-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a8dfbfb03df9e686bbfc44f4f424a75d1ca4f283e5c4dd99b97ae0e381a73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-isostasy-fork-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4029f1afea75ea29252cb472964df460c97f3532605fa62b8d6b41fbc1c02350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-biotechnology-hercules-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163a7ced86ddfa55ba2c67f667dc44c1bac1fdaddd5dc437b94c8877eeed6e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188021 Malicious code in meteor-dysonswarm-geckodriver-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a885a9e540e123aba57de65173041c29a0894ea5ce3a14b3f8c7ef0369341f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutag-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee722dd2c06d347a898820ddf689bc23d19751e208ebd9c6e5f8422242ccc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatuagfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f493869c769f23ac07c56080dd6ae65fda964dc499a5e514f435595b8f59dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ufavcseqinsdaodataycaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a24dda89c350237fc9a9cfc9607aa6d34d76e708db232d847c405883b9912d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184548 Malicious code in mugiy-ajoig-daiajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a26cb06add0f09e8cb8198d029d2c5768028fdd2b6f15541451e87d87afe3bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183252 Malicious code in kisut-diufg-danuamifuifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bfd58a7a46d32c702eccbf08b86194d39901377f49262a8299bd0f336fc165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181821 Malicious code in avangs-olims-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74b8cb6c2b8b495768b47df5b789a591e633d060538585cde342e9d11befb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a64fb5f661323031fad639dddf6c4b1de8106a80455c7b4c387ed600e053ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb0407019e73a279ee1653f976f770fdc8ab42ee496d70655aaf74d50da1a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fopub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3c43b8f64fb38daebf3d121c519df8bf0fd4583fdfd82c4929b87cc4cc0e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...