MAL-2025-185608 Malicious code in astrophysics-mesosphere-neptunology-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684bd004536091223ef4c99151f120e9e68cf9d9e4b2583634be658dd965d50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-borealis-vuepress-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deaa586f7a513b8036116d867f85c2889429e1affc2ab69c5e417d09987ff2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185895 Malicious code in borealis-hercules-ora-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9629f8a43475f540dbda3704d798a24991f7120a96a82ddb110b11d79e356e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183740 Malicious code in manu-oy-giososli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75a9c9cd70f47152334a150e0ca1a77bc323e398f5604922685352654145004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrusyyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190ee04c33090a3cc7210a782cce1d6a8850c11e6ef4e0211fa87201e03bacee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-biabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d245e5bacd434e0274e5b846dc174614b9686d9e18becf0e5d35b513bfd0a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185128 Malicious code in sonic-kulig-tgacedcuadoapav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b63130f930adc05d71769743fcb68036e6a8352f713cf7f9f55e221284d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183007 Malicious code in itale-dci-rfsfrgdrgtet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a586d58b0af955786cc2e533a5ea1783076a44333ebd9e4e2cee20b76831e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaassdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f51fb2bdf548f32b43a9b2a2243c928939a44867e768a280811b73b86f2d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoetfamola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842e6c7197064155ba4796581b7130e1c1e8ab7586b0f1ade39fdc9f2d7287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183770 Malicious code in manu-oyib-gisnoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605226e63b084c43a784bfc3c969698003dc3d29afa04502a921b876b9e5f06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183575 Malicious code in lomi-fus-ufisga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30773ee83b3a54425ca14e3d8a6e40d2576eaaedcb9fa05b856809dc62cabfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816dc57849c606b7b6c633a551a997148d47ee8f1c3ef48f172954f69fbfb2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guntea99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2668cf46c1aed641950ea5ac9a5c26b132f13438702f7a2b35d4653699f0e46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-welus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a14e51dcc275e7c5422c1c00734907212b404ad13a16dd020b25d72cafab19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174723 Malicious code in hitachi-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d4f818f68f3fbb9254d4fae646cbe0c7726584f07b11101eb4b933bb20fe8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buy-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b599342ad2a8e3c2e550e77f14685e0a1e5a9ee423f41378cae33c17dab394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunabi-cufuamigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a428aa640c412e6a1a5e269572a7956fa8c5a0bb3c338dcbbb64bb6a84d7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179061 Malicious code in thambi-geunme-vers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e768b7e691c0348a703a7fb896dff2254030021cfc7c05b79809d141579afa9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0ab6cbbe088003eacd39f6b9c6c1f9787a3d95023e1a9a6d449ed38108f45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...