MAL-2025-187147 Malicious code in genomics-outercore-mongoose-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9599af6ad25dd61bdaaada8e8915ddc13209f52f00cd009dee659067e46b311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-aoan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bf154c5946019e6b144b54d55e67c4fed573cad4a4b6d095f49cf1a3b2d722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b7cc53acbbf9353d58fe43267fa8d26ab2870a7144012364a074a478f1a5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-inuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc0a4a32082b9bbcd779fe505d685506c57839244bb683c4c60c0943622525b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iobloa-minisspe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8337c3a5b1b76082c9782b6a6ecbadcdfe392e6b31b0c63190a21b21445a780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-goodmin-mix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291519c98b9c19daf53c25d08409e3a3f43fc53fe0cb8f05c6a59624d6d9b1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179248 Malicious code in tray-uozp-pustr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbdf7e34bcdd42c233a3c22568ae4c8b20fd8fb8dd2ddac197225a33c4de42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174940 Malicious code in inul-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa702424ed65d4a2d1c17bd0363e9cadea29b2a30fa42ea1d8edfbcfc0bf0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176538 Malicious code in nokire-tanjiro49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63247c0a96e0f78d55d9031e151095838048a99c6ca6919382269115317937aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aoifeoconnor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5cdc1742a7b05d3f5c85c2c11702bb65e214ade32e38c7819f112312b17c5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fanafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5b2c657cb1f4a0b279807bbef0428e83e21534667d7ac4d3bd763ee15722f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335560da350540d5efe005c43fc28c850bf22742df0878d947a56d57c6a271d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-kalian-bauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3120e7fba89c715c3f12d3f9e10ac0ba9a4fbb41a8723dfe8864bc5cbfc063c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3852ef7eb0e260ff4b387e48847d0954bc9b92496c31d3fa9a26fe3c66728eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avimun-abatip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53a3b2229f7de3c2f104c368e3d49097eb0066cfaf88fe8fc0cbdc571239f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-goia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617427eaac6df836ee344b995cb0b8e4363db3e8330383d2830894940c4895cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutayua-tufadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b34bef72c22ed8cadbb1651ec2040ce150303c9211514ecc4687b801f697c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150621 Malicious code in @miptaa02/fgbg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e7921d091aaf71cdbd2b14c5a6f7108b485113795166fdafff8e290d64d45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154480 Malicious code in diago-kulipo-lukafamaahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa931eab5577a90a9a09d7d7452a9f18552e2f1d236dfda31f461deef61f4ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c074c8e732ba18967f68d39e237d810977fef96de1eedbdee749dfef1bc19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...