MAL-2025-189229 Malicious code in rho-alpha-phi-cluster-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e7a4ef57dd54f76ac6aa11467b48f4f5cc687a1a46e1934d0b1dff8c2cf4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185869 Malicious code in book-boolean-runtime-grep-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248fd29ebd39c973c6e898d5026a9cbcb91abf2a85b678c558d7b07f266a7c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186826 Malicious code in error-fast-class-visualize-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ab6287114c993123a1c774b449f01bfe2dc45a5f5b310517d84dc224ebd170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187955 Malicious code in mdx-resonance-cryonics-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acea75af333e29d6693c967fecafdc79642a14bdd49af2ec3e0b2428ba053fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakiugabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ced8477ad96bccf986313bc37c6914b558d9c6b9adaef7bacb48942e2f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f88bdae107f6b9405243475b97807fe4f3518c565f6318e65e55f972d94012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucauayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4e0e9afcec2f7d40caac43ddb957feb929c7cdea45fc446cd246200d2932a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737f9299ee0d4afa1b181be215d620d69fca643851cd5b19c8cd226811472892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8664034e3f130fe849ebca9d987778f514cdca4ba5cc926389d022b5dc50db64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8cdc1ae9dfb22aab3564c5c21d8423c0e0f785f3eff1ff1115c296ff94ba5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avumangaffgaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cf83fb84ea3b88e625e69db2874741e8d30ad301b43972497467b367d80396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fngdye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e39dd2564555e35e1d955359b930c2f77712a2684fa5e1d2b9c91e1242ce9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c6224346fadf88269213bc36d3cbf7542eeeee6690cc66c6a69e6f2233e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-aganfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987a9cc73932a1a7fbaefa7661666e891e2b540ce42c5985d0014e8917a1bf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d6d21ae706e5023825f82b0fd7dcf63bf9103acc2f0cf46ed3367c71db264e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliuka-tamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af515cadb5ed3250e691d37b9f9ab486e70a71f37dba78f915acf69927dd1c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olodagivl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40daf3cb74df623df19cafda754a1a92395158b6665fc72992053de3358bf36e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnaeav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5383e188e2740f1260f965dfba10c05fdceafaf7e1243aa2a77f0fcd33ff7eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e8a471912b33b6e4113f390d5ffa2f3bfd3d57e4635eec9141c9a56c1d1247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvuifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8532fb062682efd4c13a02578c52f3eff559c78c7391a5297b0a73139b39a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...