MAL-2025-186779 Malicious code in epigenetics-graphql-tailwindcss-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd945513f752e172da155108dae68cb71e0aa8ee82dbc96af971f7560437f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181953 Malicious code in flights-inlutag-idosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcadc78bc14254dbd719e8325c15697c0c420fff875055d7bca01dbb869d608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7ec154070d1c79c46a223e89ae53d402f1785884e7db30c605d9d799ccc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-izviw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9776e11f33117e433088223d9a7acce1f87f8e7f5e8077b7e5e990490069e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181119 Malicious code in teate-thy-sonic-wutlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b9afa5b8cafe466c49cf7ea5557ed4cabf946426c1c9132ca6af7c46570446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171425 Malicious code in joshuathompson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758e2626507ecb60a28bb1d416b250ecd8ecb226c01b9e59c64992ce7ad8a853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aiun-misuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877db6c1ff56f58e5fe65cd7b6f70729f5299ba24a7d890b2e64e237a9f6af70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2442f2f96a68b7c42ff825ce5b6fdce320b2855116a5e34e14a91e16881192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154874 Malicious code in fadila-poke139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7db8b4e8b722711233de1e03793e6703d1f5e99a249a87635880f8a5f052f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167539 Malicious code in teagood-nalikoli13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ad662c3a9d825533b26d595326933b9900e7781ecc52fe774564665e6aa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-gepuk69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e58342b2b9084fe1c7aab7c59d7edd597bdbec873a48294b964f34e8523d00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kue26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a3a12920c299c1594c4b5eacd8494e3f8baee23a44f3d0af87ac936ec1ec05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8297450753277c149856ababc72598e91dc64587f538a031b08952a109840d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-mangut30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d5d3cc7d2ac76a119382ae2e42d87ae906a89d6eb313facad4a4045397acff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122945 Malicious code in rifqi-mangut8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acfdc5b9630d048338e0fe141caf0f309ef04b9568f16a0f7f48d0803aaf096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116764 Malicious code in rifqi-jus79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8681bb6dac38cc439b8e33327f4c986f8d0a3697ba2c976fdd2837cb20aef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kupang56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2537e5642bd5470de982ee94b954c0425580e35dcb325f983fa5f4e9c6d02673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117892 Malicious code in vina-ikan69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369ce28acc9b912bc48e43e64cdffdc7ca2546d625c367aa0913a7f13a96ab98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112989 Malicious code in candra-toge50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f89507a54dd36f020468e782305702664c03fa3b8f4f6e52024f385b5bd3f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108445 Malicious code in seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60022e68dc312105b3747b601935f8c03054e655aa953166b17522bd1807008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...