MAL-2025-186548 Malicious code in deneb-juno-virtualreality-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ab08056ce07e4b0fa7e42cc1a807d96b6b0be4eece882b85ff70488bfca3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epsilon-execute-pi-interpret-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a416efec48565b9445230db6b99b923f75f614e1b769dfc6f4337497117525a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-rollup-loglevel-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc9bcd9f7f8ab3bac1cfef2c4e32342014982407e7e69dedb4ebd4e42256d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antimatter-slidev-install-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f36ee67d3b0eff64d3bc613e4f77cf96c2ef826571257f8f7761c58e4faf537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lithosphere-quark-mesosphere-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00a6e66fb35724cd066f57229bbc6ba22c9e15e1a62650e159ca4befcb76544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185809 Malicious code in biogeochemistry-remark-module-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adae6019d62f9e018f84be98b737cae71b7abee0b11a6906cd18d6f03b4ca5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184399 Malicious code in modiov-kihon-afbafs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a55d2c81c8268e13ddb5ed4f4ce9ab422c13680947020ccce775471a1ba390c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183966 Malicious code in mitk-oni-laps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70bc013b814bb39527dadfbda3215f770d72caf832836687257e42d2a2027558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in igsboloa-minisspe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecef925919df8bc37f8fbacbeabe3db82fd866d7a83773ca7104bcc19d05275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trui-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-diauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f557b39ca18b643dce9551165dc020f7c5f3c0fdf6e6f1e2ab080b69f47296e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174083 Malicious code in divata-tugabui-iumifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23f5b3e4aec9cc89e7d7f71aa2e764a62b43050dc61bcfbe0f72b3ed4d5fa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179201 Malicious code in tray-iauozp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9a7eb510cf8bd0876a7e119f11fe45d085de520664448b5fee4b66544b5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844bd8fa99fb9c28f3d618807cc8ec34b6f318743fcde75745f49c2cabdeeb07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9bb45243e284fae88991ac4509ae044386af8e5bafebf132122d45ae825aa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-eeissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2cd640fe5c2f3fcf1ff93c577d3464a44d2f0487f8c188d08b31964d566424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-aftfa-fduf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322b01cdc7ff02fe55bf4f64ac7f8bd04af4f0ead867604726ca03fa6e4acd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-miaiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ee4159d333d7eb7efe8c4d889d14e4cd25364ddfbf1245f09ebaba6761eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451086acb775f5928b08e0a9ee72279af58f417d08d54cc939f0876a2744212c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dafa3baea5e8325ce4edb43e8ed928576d430739bd62ecb116cc7cc25ec3c43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...