MAL-2025-185990 Malicious code in callisto-hyperion-norma-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fe17e81c29306f1f25e84d0a6731bf3cf77c77932e4fcd2d1cd2459925b626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-css-loader-restart-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71cc33249cf2dbd5db35e33047b6953ad257e29a19278529523291fbffb2ed6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185953 Malicious code in bunyan-titan-sadr-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 836a1408b10c9b214262db701f733ba4db831e2d0fc96887aae14c022b606bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186920 Malicious code in export-bad-compress-fork-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2450caad5f166bccaedd001fd246098f519b199e4d01210149d86eda62fed676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39abfe7d54d9584e02f41997d6b2fe7edcc14d03eb6f367e8694d383ab87574a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-akac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0417ede0e2ab34d6d72d7bb395b56985f359f92f75b854a261b170dd127d6ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176853 Malicious code in nuilva-vmiam-avs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdf9202fa04b6d7dd3fb190587bc4670a383a8db4e2f998f78c5e04783836a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179392 Malicious code in zaskia-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88086ccdaccc1bfd0c363c7a487bbaeb16438174ce5c294e475caf062fe2b28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175578 Malicious code in ksai-kais-ajiobaniolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8dc51767b91c13a4f5304d65456f90a0a6e4b967b8cc35bd740677d55a164e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiuple-amakora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1b35deca1f30e9b278b05b52b1c7c7e182dc735b3ea3ef967cbd4f16980a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167955 Malicious code in teagood-yakuna91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8005ae2e548f21d42fd9cd901c6f2cbdc6d1935c984958b04d6ad9a98fd52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155646 Malicious code in hafiz-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f51d586e6250ef6a76e034dcfe139545110f5f2436e0d3d674d8bd4b62eff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164807 Malicious code in rinto-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d990c66cef5395d3cb372167ba80ef1f545f5f670b6dcc2cf1e629907908a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alasiasaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6b2ca3593afdc675467760668948c1ca4cff1520ed390e34eaf10b81acb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutafday-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82369d6bbc04645650f153877cabe29ba47cb85bd7ef25f155b0c399cd09d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamo-alauliaahanoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11db4f698e8ea77a8d37e5b39ed6e35a6ed3c650ec636e6d00bcaf5f86675c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150946 Malicious code in @miptaa02/sfgghhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05640315667c969dcf5411732208ea33753841cee422a6f200cc31876e082e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84fa737bc4e1df0a182d3c2b816be370ae2cfc704fc3abe5d53198a03487314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8debc42289eeb69dbeb050d12f91be35f66d9c848b4ec74ab50c72bdbc15582c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168868 Malicious code in technical-alin-tubuinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f35881ab207c204b288c91043c8e64555220e467734d590e967292596d92be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...