MAL-2025-189100 Malicious code in redgiant-cypress-mesosphere-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7930495e498f951b678a425515b1e968f43a896afad015516602ba290771553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in string-avior-heliophysics-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7ef6f68451c5fa51ac41295643a67cb2a6c0437ba9c76305c143de6da7c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189531 Malicious code in slides-public-alphard-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7de09261f3144209c646b5fac5d76328042839266e5a56a0daceac2a505688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183681 Malicious code in manu-oi-gisiasvugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dd7291241425b1a962c16841c92cd702e35fd7eb3ee1736f0efc00d4daaae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-afidu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617766572fba3954655dbaf9ecf4a9fa66c12b46027ac37f7709675a8cf031d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175058 Malicious code in kaka-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a929c2176564a4d33a26cb112ca9119f23b3f11d4a9ffbbc1de803f0429eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-muabadac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd1a53192dddc2e9120effe25dfb50bb83ff3d6abc2b017424d745f95fb7301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175690 Malicious code in kupaio-kia-jakafafswafofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce552ae069979d367c5c9d7c3a1548aba51f36a80cdb3873b15a348efb97786e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajanoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54f7dd150018d115ad86fa8a71a6eb9b785c6b553ad40a83a54004a94176dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a6db169474ebd98f27e29c9be70dae713d668ca774e800a5b7c81a07d14ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/weaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff0afce15f8d925e080df27a62a41d3ad03ce29931b042ab892ee64eb4fb7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156310 Malicious code in ilop-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a94c5e2a250c2fa9e1a9dae02e134da4ebab42dca389acea190b9db0a68385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156438 Malicious code in inal-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2196c096696d0593947478c24bebd8b27452ca967183e987297ac6d446da1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169399 Malicious code in tusaaya-sdss-scz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8118df1da3308cf5f6ee65fe357e0cc3925f4bdfaeccd04ff45dd2634777b73f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168336 Malicious code in tealove-lady3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ce84e070763684f35eebb8b11aa4087a5c9d44b69df45418ea8635bf365d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158061 Malicious code in layla-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a089e66af18cb698cd0679695214545b14e378b3c950645c1e7d1e357ab4b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150892 Malicious code in @miptaa02/raldsadzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999bd2bc1fb35e0030cd50e29653e4dfd4cb0ce04bd2b2049713a07af39d08be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-pigfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b42928ed1dd5928dc58929078a1205b888693baf2fb394e63ca2ca87d7756ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142410 Malicious code in farout-draco-supervisor-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4858586155e7e63f2df1e9db1181fe0476633fc8b100b90271961b692e2d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-izar-deimos-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade47e5512f5d5ea7ae6f5275ef4dd11f9b97b478c61a8fe6376509bf39e0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...