MAL-2025-186039 Malicious code in catch-float-cluster-assert-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef58c9f874c23e8a9b27a97cbc7a46fbcce68e4f6bba08731fce9b4108467a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185357 Malicious code in abiogenesis-proxima-astro-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17178550a24192e99f40c2a9a3ba7bbd1e503c96df3ba401baff83d82ccdc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventhoriz-yonder-heliophysics-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6dedf6a6be5b51314918d364f88bad64cd52afe94c80b323f0154fa6759ffd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189060 Malicious code in radiant-toml-primatology-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e736c0f15dac33a2a045f08b15563499e027f9774ffeffc83ca24ee39b69a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuygfjbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410aace70afc8fcae28b8b90521b82da544d145ffc4585de74bb02ede18352cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9223d80a741f496e4880dd3344fb52015a457bc3498603fd848a58203a89dfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185131 Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185060 Malicious code in sonic-kots-jaufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185035 Malicious code in sonic-kos-fusg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a1d1012cace5fee6c9b048af25b1e2f11ef2eb369189e15a1d544eac9ace63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucauaugayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114defa79e721d32576f9ee3696faa4bacf72a6496996f133179099cdb874eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc225dcb5c945b05ef94a2edbc308e01e7abd3d055df0fc78f94a6bc382cc3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd661555dabb507cb2551fb6667531afa960289b63d90eb644f276688feb016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobacuoafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46aa8530eab216b5a18144379b809f764e0e84847f8d6e83e4d5a7ff447333c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukaumaibivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1d6b531a72de105e77f82f3bab4ea0720def32836615bf051ff18bcddf1175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182441 Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehxafea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8288e02475f9171a39ac05a5f52f962cd1c0feb09df654d6db2eef0181539c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsguset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ffcba56ef2951fd88ca7049c44308a2fb91e21c04d3cdab618f0b79028140c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183212 Malicious code in kisut-dfg-dufadinban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabf010cb9ac4b22bb0f845e8b2efbfefa50a5e92a71e8f5244cd1de6f22d726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafefgxad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6405bd3fd31bce319776d5dc6bb77430bb28f433d03168fa72a7b447f014d39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabualikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca68d459ef3332387bdf95d25826d11caad6d4359cd253e259bf599a17a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182752 Malicious code in inda-foji-gisaguan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9380d1b4f21e3bd5a1912a41731498cb60b03749447b714fe0620d8c47ad7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...