MAL-2025-190082 Malicious code in upgrade-async-forever-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75caed0ce1fb98070ff3b33974aacb7b1939cc7108213d2042323c1aa276575d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186863 Malicious code in ethology-zephyr-dorado-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6ada6b7366b59dc664dade1f8bc9f3d3c48b7518f8ab2b2d715a6cf873db80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189883 Malicious code in test-janus-eslint-config-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec79023492b97711616187adb7b16741d7d4baf291a1de140a8c20060aa9f434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187729 Malicious code in leda-command-aquarius-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b97a5b24e9f1c261d1603afc2a38bfe2203106a11ea4b09ee3b7341b64025b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakiugabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ced8477ad96bccf986313bc37c6914b558d9c6b9adaef7bacb48942e2f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafiasoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0348e750a93c20654c0fbb6e5eabdaa7814341176adb473e55e206393df7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukani-hunauaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4badb3d332d18df951e6754b1adf262e803e387fafb2507480e63cfad0ba8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcaducxc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbce9d421d08578a5241f7fc1ebc5dbcc00d6328784f91c724cbbda4c6a7f662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-aganfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987a9cc73932a1a7fbaefa7661666e891e2b540ce42c5985d0014e8917a1bf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e0774f84f0aa9e800f645e71228509805731df7f7b343e7a4b72fa8f7de89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudafigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286d228974d7a44e709bdc285b6d30160be951c7a32cfa8af83ad42f3386d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacdoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a71a3a9a74f6709b827d7dfaeef39d8b37b3a9113bc53c8cb382a14472e8da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8664034e3f130fe849ebca9d987778f514cdca4ba5cc926389d022b5dc50db64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737f9299ee0d4afa1b181be215d620d69fca643851cd5b19c8cd226811472892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8cdc1ae9dfb22aab3564c5c21d8423c0e0f785f3eff1ff1115c296ff94ba5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabualiukaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c59915842e89ad6c5295fa13281e768d940b52dd89d2660e46ab8e013aec7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f88bdae107f6b9405243475b97807fe4f3518c565f6318e65e55f972d94012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182122 Malicious code in gocay-uga-viguvuivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e160d184b10c8d15480393ee4bae2f06a19d61aec0a668939d3e793a792a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-huji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60817f8ff7f3e21ef74adb7f4fdf58aa194dac8f7192b280b994be0df8186fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvuifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8532fb062682efd4c13a02578c52f3eff559c78c7391a5297b0a73139b39a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...