MAL-2025-186908 Malicious code in exoplanet-xerxes-interstellarmedium-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6b83f3bf5aa13c5c240a68822042cd334b7ab9ca7607f5c0562f4b8966fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186115 Malicious code in changelog-prompts-europa-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146d38799b702fcf2aa71251a53635f3352bc26fc8c894932530f350b66a69b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179545 Malicious code in anais-papoa- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6af238d0118e2e99c02d8345a3d389bcd6caf235a0a1b548f2b23a36b21b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180698 Malicious code in teate-thy-sonic-miolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253343a06afd372ff8afbce8ebc8b754fc2b065293ea89a35adc3216f4f83d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d9db8ba0700109ba85167df4bbd6fd99863e95490c6a80ea482c76859a91bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175367 Malicious code in kapvino-soi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc89e75e70bd4006ae4f6e8803d705083d78cab61b4ffae8fa50b70df8623326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manuic-tam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a585bdbc5d1e0e846df992ee5df4e65635be7ce16585be985d75a8253dc726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f832ee5cf5d97b0457284ea92d687e93b68c6e950c32ee08c218c2539066fc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ca-buniasn-junio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2007ec703e734811df0b986780f7601a78e0b81cd3f3c90006a998ef65dd402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-sdar-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0403dc7050cf3b6780557584e7531e22617216d19267e99c25647e320cf832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f9bbafd8167c4b226fa3871452368919719105e1c2188bbd5e6e41d8a4d0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154372 Malicious code in diago-kamli-luola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a21f9b1cc6c4d32a9475fd9f1b47d0d13805938b0390b752a04c71136073b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-taurus-less-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c2ef051a36bb0e4800381cf3376c8859bae31a8d99603d5442f10b560067a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-jest-wasat-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ff76c6d38f816d4a403227d263b7b7b6524b10f5c705c9399882aa83327298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-config-mutation-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8607db0f5cf2f8df42373224d4090df0a43cab1471cdd21e6c2bdd337fe782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-chai-carina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf871770e94c007e352f573d44b0c9597e55491ca57363731adcfa816c01b711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145171 Malicious code in morgan-commitlint-config-angular-repository-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76be46922349fe60cef0897d815de82f3e2665908fbeefec33fe0f1232653d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137629 Malicious code in utomo-gudeg16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa71e3cc2d622371882311d6568508fe22736bce5abaff3a16311babd023967d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137225 Malicious code in tania-oblok85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329642d21fe9c3eb14c3229074eb98ad030721e5ed3a67da34db149d54732c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-semur98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5676a989117f6d373ffe9324c45384859a64a279e8a06801db6bb61a6455dfdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...