MAL-2025-186779 Malicious code in epigenetics-graphql-tailwindcss-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd945513f752e172da155108dae68cb71e0aa8ee82dbc96af971f7560437f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-style-loader-xanthus-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a5f45d9564f44b2db677d8a064664c3950bbf58615506c9507134b1044b3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7ec154070d1c79c46a223e89ae53d402f1785884e7db30c605d9d799ccc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182704 Malicious code in inda-fodja-guga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f3cfb3ea05c3c2bdfba514a76137476045ed9d63cb57dfedffffc9552bf4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181953 Malicious code in flights-inlutag-idosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcadc78bc14254dbd719e8325c15697c0c420fff875055d7bca01dbb869d608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181955 Malicious code in flights-inlutag-idosahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c02ae108d31860db90b1a0afde180c30cf4dab805820670ff7102c739951b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-izviw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9776e11f33117e433088223d9a7acce1f87f8e7f5e8077b7e5e990490069e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180730 Malicious code in teate-thy-sonic-natzo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007e957cd60363cfc3b34273e2dbb642f758ea55121ab16d805bd8c6cd5bc183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181119 Malicious code in teate-thy-sonic-wutlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b9afa5b8cafe466c49cf7ea5557ed4cabf946426c1c9132ca6af7c46570446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanu-nuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19449a929a10b93620292ad4667de9e865351b7ffde066e23c5611dc1b23cdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177339 Malicious code in poglymer-ogih-gagofgasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a14b419666ec0db9bca3e9f42c14b87cda293c08cad5a23dc8461973fe3d6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-dadfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09066d3de84f75bad6fd93197808b1fc5b32fdc1d6d7e674d458243005d5004c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177743 Malicious code in polymer-aghhgiha-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250b112f596a5bb079c19ae7cac9440b822b521992a9305dc16ffadda989c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-baidyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d0a48f4434b5e0129e78cd0d456512a2121dc3a6ca2347e3538ba93c86aac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176166 Malicious code in miusan-nab-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd7da4e1cafdf31579ab205264309376d5898b05e46bfdef0e8adb22a17d630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-afgucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c294da943926854d0b2279353870f995f3332712cd92cb2b36fc1aaedd37ad5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171425 Malicious code in joshuathompson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758e2626507ecb60a28bb1d416b250ecd8ecb226c01b9e59c64992ce7ad8a853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170479 Malicious code in verify-taic-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90667c6315c358a93c5dbab248f55c5318c97f3e4d07e0aa25d64853333b98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nar-buntal-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c457450e0f0dd69e4020f23b341f42c8efc462b69f63e4f41e6851f84780504a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efca4862fc50f6957185c0ca3ac25454d4c7d3b7c03e00f04c2fc1a9624f3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...