MAL-2026-10321 Malicious code in ishowfeet19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bc2a7c89f862926aab27d42ebc31ed5c39f90197170a9b87e1dca9ecf933f5 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

Malicious code in phenomic-paleoclimatology-slidev-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279c8e17a716179e47c018d674da33af1505e188e89645680d467ba11d2917a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185382 Malicious code in achernar-ursa-server-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d7856e46345ac0a8d4e9a71a876092fdd5bbd9080d350dfe107e611ac8b883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187541 Malicious code in iota-levels-foundation-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c2b0af1eef0fba29bf292945385ea48af585baa02b34ea53e9ae76e24eca73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-titan-betelgeuse-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f779285f8402967a51b4a701f70d23e5043abce71d017845f6f5674fef4929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefederdafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d9efeee38d4f2eb78455cd5f30d9b969555c180bdde6c2b263d33ce8eea021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadaeaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afee265ddd35432d68cbc3da26f51a8e611109cd0f0edbc990e6c8964f61eb4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afayoruaganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a90029c815983ecadbd7bfc4d777053cddfdaef8458630b4bd84be31d0034a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184005 Malicious code in mitok-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c6a932a6bca451cbb1d8ddb44368b8446e1e5eb4124dd9f6d7a453beefa7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jeje12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec76818df66c6c593854b330dc16b8d3152466603aa3a3b648e5518ceba3c971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181150 Malicious code in teate-thy-sonic-zuha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a99023e0a210b092199414eb7bc9ad0dc273c01f9656228c3ab922a22fc071a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satd-fariraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab33dcd6b05b471bbe7c710ca3fb6029735e08f2175747aefeea313371a920c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdssgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605363d4634be7497bfc05b20c721e44b13653607e0f2585a5547fe663a3f126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178902 Malicious code in teagod-naiman19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dda47577321bb446e92bae783d4144c7b8659b93df36145ba8b5621a87cfeb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171170 Malicious code in eshankapoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272f364ff0834b8b7420c609384bad49b5c7ccfe430099e0d6731e023fe7a822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391ab558d8aae1b2deea4c4e9840227a8cc78b21b48ca59f4bb536396b63ee49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afiat-usutafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9eda0251f83541237cdadc9c6b551c81bca89359d83c1ab57e55a366cee22ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151045 Malicious code in @miptaa02/xfhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a844c799d99ae90771c5a70c6cd2aacf9da9da681e150ec7390a7fd9ac372f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163723 Malicious code in nudela-af-gfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b7f2b96c029853e43a7203d86e9fdbb146c93ecf9441457cf9bbb3612093ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168552 Malicious code in tealove-nokire24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b87bf3e0def4ac8385f51d8fcd5d160276d02c1594ab95807cd4abf1befe2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...