MAL-2025-186973 Malicious code in filament-thuban-global-volcanology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73f5c55ef7dd797fac9a3ff2fa06aa2cecac5d2db7aa246d25bc7bb936601ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-areology-perseus-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a0d0d816331e3b9eeba505a2091701deaf08b125e2a81a587179de98ad3dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-xerxes-vortex-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946bf71ee36457170ee49ec45ec813f62e10c9a664b58f862c83f7a5a43465a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wind-psi-zeta-debug-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb1fbb789018c346a5f6f4730f72aeec7f3a6b735977e2c9cd571c4d32b0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-telesto-cybernetics-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93feef1dbf14cc4a7a5a3b3d8135960ead9bd867f10c2706c5411df97417a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189878 Malicious code in terser-webpack-plugin-spectron-webdriver-sirius-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d806205b74b56ad6447e53075cc4a8f467cf38ad549070b55924b5674f905531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188254 Malicious code in neutronstar-regulus-sqlite-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd76a2dd4b6f1c8374b68d6f578a4c53895f8cdc8fad0504324a71a8377a5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47dc2c1e11474712db84ba6e3effbc200467d07dcc428b27023aef7d8695055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184629 Malicious code in odasv-knu-bonijavfccvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e23cf9ade965eab7582bc5b9b35ae77c5f520316edaebb50e48a752891e388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184041 Malicious code in mitoko-ontcami-lapikamakusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233a1506dca63f961a0b57e648dcaa9d263b66bb029efe18b7548186743eb06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180572 Malicious code in teate-thy-sonic-jonsut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e753c6f0862b9c29636588b5d4a91c1025c172f02dd36f971f181ed1c74ee41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177338 Malicious code in poglymer-ogih-gagiggaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94388862dba931ec804de0e38b76dbf575619161ef033d55f15a9f33d1ac173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutafia-dagiaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70f4a0edb8abed2fb41dbfc8ccc1fc185989cdc547bb37ac105318daf87f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipidssdha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313ed412da080290b1d85ae638513e48b8152af14542775ec0ef322c012090c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipofa-ihadsufah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f4cf1c7b555e5722895b09c2979751f127213ae96bba475d48d3c14494a294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf3e6c3e332c61a8e9a277c475d3337ab580e7ab0642f9282b85f9a8c7db8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176718 Malicious code in nuilva-baviva-munvavidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b090cae0753358fed2445a19ef22a5f74b0bb6fe2826972e797f08e4e408497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah5-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3224b2dd7f8ac7a1bf5c68b4a1bc3ab1e7e46d12b8fd39e5e14c58591a427be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80d0e6ffaca4e52d85c219b989f6970a7709ec5edf726eab4c485b5604fbfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177441 Malicious code in poglymer-ogminmh-aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f481b76a62a821eeebeed3828a486c02609c2fc01cc477966f8cc12cb28ffc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...