MAL-2025-187065 Malicious code in fusion-inflation-dactyl-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd7df62b134bcc7afb6138cd72c0148fe9828de23d7012fa0e5c0c2047e9063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189516 Malicious code in sirius-lynx-antares-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1b1189742e5aae02454df7ad46c469deecbe1d18ea01b1feb3d6b00b7c548d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188454 Malicious code in optimize-double-nu-cluster-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b98723aa7741d128b3d9fe5fff42be8f635f757b1c6bf032d86eed998a8200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186495 Malicious code in debug-char-code-double-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf04c663a92261e5204471a60b4f4195cd06203bbc747e721e88d638e35efbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeogenetics-csrf-aquarius-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bf298157c040760bce94b452e888389305beacf18b29f6f82b92ab32890e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meta-code-debug-key-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c44349ff42d4f48dca55e6eede52c18fd580f1050b7cfe7ef57d36b8602a3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182634 Malicious code in imugiay-ajvog-dnieamnfaiyugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fa6fe12bf45d08c1a825d80d1c1c4d52076a0f8e8e34d998efaf752555eba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9d31b6b44cd7a6ce31d19da5a708e1969b15df3b09ebc18d3e2096591188cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iyucauaugayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af798a49acfbec711a8c251258a928efe8534b8bef6555cd8084b3b5d6920fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafujihajdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7943cc25ab24b06124f12cced09a3542f6f1ce8e7d59911d53fa4c71e625e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184708 Malicious code in oloc-uyg-ugoofifaihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3edbc90192c3fc23c1f38e49a6d218898536bef10dbb09d384cd2e49598583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181315 Malicious code in @akunsansan0/karedok7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fd9b90faf8d6a67084c0ab4b071fc1765164ce0dd92dd2aba7d5a554243583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181322 Malicious code in @akunsansan0/kopi7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7eaed3db39f2fc856bc9218384fd4cfcfd57e8b3cd073cca57f7908717f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179751 Malicious code in kiut-acg-aveudcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3252c38762f7a0b08b029a39c8ed186b809b341bafb2f8352c455bca363a590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-davataihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfd4520a1da95b8ef50a573df4035307e57006b762b0c92e571f5c89779976d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff1cad525eaac9e84e01f34831802bdb0387c108e2f16eecac2250cac5a1318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175925 Malicious code in mahiya-sutiynu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b680b3a834f54897ff7852f6bbfc1a84247288ce77259bd53cc81a965ae475db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8f1c7270838a6c6e3579b930789c327ed75c034e6058361d977bd5e837d276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174331 Malicious code in goodafin-nui-giba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defa3b4c4192773458ecb145b354aa356dbb5781e5a47f8fa27382a078a8f25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176812 Malicious code in nuilva-darde-godafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f5fa15ac4417774d6068cd21711e02d82a5e107aabf90d7c9d39a5efdccbaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...