MAL-2025-188002 Malicious code in metabolomics-cross-env-antares-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416c9d07d4bfcbc0f380096b82f6ae758880a86c41a1d9264e1b732e0772a9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ace3cc772604f83dbbf111fb45dceaa972811b7830195765e021db8cb1aaec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoa-inumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e770c03fc66224ac50a30317170f617931d5c20547b39cf0d209f874179644a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9c352ec633acb7dd434948e4c28ca8234c11667e302c5cc2e9c8053a2acc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175271 Malicious code in kapvino-socvnvi-bodaadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ce8056cd73af5004dfeb2d7c4a248f75f744bb5db5ae922164df181270fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150825 Malicious code in @miptaa02/miaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69909509d0336a2cfd2ccf0956cde8683cb53291de284870b9620250c51eeb2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162509 Malicious code in nokire-genji22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d603bca1acfd9ca9484afe6f0308599aa9c9afc303e9669e9dab0ae6c97c30d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168857 Malicious code in technical-albio-tolimr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d293cb8e35e146bcf3767dc0a03c97729ff1db3b374196adaa8028e55f131ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150896 Malicious code in @miptaa02/ramyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592b8dd7a082827fa6e72eb1de6472952a8359d63f3e281b069301f4caac3b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158022 Malicious code in layla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe737f785adf5f149965e8dcb042d524d4391117ae6c32f273ae13cb074a0d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170324 Malicious code in verify-aya-amil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4dd738127b97d6ba6d876359f7ba5439193f3db8b453eb2406abac5bc6d85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58d3d9db2d956fbb34dc1e09603e2728901a84b73c2cf6fd11d4f56eb55b2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747180807fd3d7919ed3e1089e2ebf90625b672f51c3235ed916fd70f8b77890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-abunahbia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37262fe7904c9abd8e24dbb1520c6d28addfaca21f5897399078de93ad7b460d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151357 Malicious code in abina-amoavugoi-anuinahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1855b02bfe5ef794645a13cc623106e9047081b29e0921c8b325a23d78de911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455558cd02d59a90c9ce6ba67d10e0bd7b56e1782729d6e1907f5be1763bca29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153400 Malicious code in avminh-afgais-fafdosafiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d96bac10b49d3ee888d6683bf3aa5cbde5c9dd083aa7470562cecbac510aedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139517 Malicious code in apollo-jasmine-pegasus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71845ac8cf484c8fe99a1e0907d4ac0bd2d26a7724145562d9f8007bcf0f8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143828 Malicious code in janus-private-phoebe-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e39b17f67223220fe63d32875adfba39ede6a56f0af2b1cac86d9c7bdb1d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129060 Malicious code in ocha-semur62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67ed1492b4737142562001696e7617e37b3163fb515f6172b5394cdd6384381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...