MAL-2025-186325 Malicious code in corvus-phylogenetics-metabolomics-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1896e9775f1ddc9909fdfe077e42090773fe04d0f252673361b2626480d650c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187322 Malicious code in helmet-blitz-izar-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7274aac6f97ba8fd1f45ebb661eb0379a9e13bb52fc4ca45314725f2352ed531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190116 Malicious code in ursa-readable-astrophysics-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc80f1b9c5c521714bd2e80e2a6b16e345cc954db76ce53bf0af5041f30f670b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-proxima-isostasy-archaeometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac93addf5705ec6be9762a965b872ca031400f21168925e440d5142383746b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-kinetic-mocha-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96160b948656b764d9430295e2b31751c70cbd633bb727db7d40e6ab62af00a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-petrology-sedimentology-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1954de2e091aabacbe5fefaabe6ea1065d082307bf2e67684ab0624e168e5726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeta-cold-notify-fire-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77229f2590e999b50f84151be215aed98544f5d472493de435539a1fb1794260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunise-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a205d995a596dcc62e666ca040d27dfab0a5f2c7eb4c42b9911cfa803e4ac13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8697849eca8455df70040c6a83cfc9a1c04929b07ecb9b67f35038bf8911d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givaksisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777d8292df47179a724e8fb7fd4d389458e9dc34c2d3eb0f650e58d48dba0a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-ildgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2756271b6334628803d639e9ff43ec25927fa3d15b082257d1081eda9b3811d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182005 Malicious code in flights-lutug-adibalonlo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013dd0c86bcbfbefe091802f5fdf866eb41466f19433859ae06a03cf0d4676ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidabilamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfb33e6a1428dc34dadbe616dd9c742f989f28e639136c2167239ae12cda4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fakiugaubas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19247714b45236e9a89363ed8e31131fcdb22953c67db4e633a64b1712150f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184561 Malicious code in oc-gua-vsjfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62869c92f484eec09e6f5a960f3fb7758eec535bea1acf55475d8b2222d7299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kiat-ibuarda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1ae965aa32fd400d9c1232f241b08a8f8b444feae42b8f4872c9961542de5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181713 Malicious code in astam-ifut-dakakuioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8371d659916ed8b84c9bb783870adb27df9d3507e8f3765b2769cab37ed1d28a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c6a932a6bca451cbb1d8ddb44368b8446e1e5eb4124dd9f6d7a453beefa7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahinaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202f8b104a42e50a0b71b0a124efdd6327a934040798c44509c1ddf275dd589b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181941 Malicious code in flights-ilutg-iduihsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f65d51f5974d7645eacbf7740216e63d4aa8be3e79248f9234f3ff046b024ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...