Malicious code in supernova-dysonswarm-arcturus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb56d71359f955d83f68c2050ffd9f7e52a84eaca18c226afd9b2e5225844e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186043 Malicious code in celeste-pm2-xerxes-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34b9a91ff88597bef75801c0d6dedc69a7142ed8501fa9bcb1cf6c7cb0ea821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-spinner-solis-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d92bc8e061659af9912ea6207249e0e7d6993cab9fd076885c4a2971c386498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-vigugudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e695dc83b953b654e742eda9e94c955d2b7848987587fcdabe91962f1d635535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181689 Malicious code in astam-ifukilsit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd312f77cf708a116b5d75778fcb51d6bd206d45f04ca79f8a6893f998c128c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181491 Malicious code in cewe9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf59e5b808b0358ac24f3b067217b9d9c11b610639413d35049141b0ee976e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-irkem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d15113973355cf6ef4585c7bc49c57519ecb58e4d3e85d5280a55ce4a34c480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokioimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9892681210432c6b1774ba629c23f4dbf124c92b034f5e0c80462a4de0cf5b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781fc8b91b74eaec10526ea594ad540a8771a1a2df29af73da52b277b632ca98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdulll-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d45d859145ae92765f6fe76ce2c2f031e16725ce240045be4fcb33dd7d8653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-nasafdfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22393c673195eba2608a2fbfc1860ed8d02e9a11a8651724a1c7b7c22fb2e435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165889 Malicious code in shilang-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200dbefb03dbfd3689e6a13f395696e980e2e0e5c6ade6bf4dcb5d361c11cfa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butrsui-muiko-mutyooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0792623affa23f58116447a54d31129110e3b2ede7f0fa3586bb207286b1bfa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-djhhoyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a721694127e3a360f13dd96bced35bf2e7614b40590f4608cfc257b9a6f962c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c15a0114aae6a1a6188df69d80f1a2df88597d5db689b9c790ddfedc46885a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b438dff97b1b91b56a4cbf23275a91c04109dd130807ba03afa1a62611512d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9895b7fb3302d754c54cfb6f7d33b3f6153ff9190bd6a6fb49cbf63d74085862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dilakbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25201bcf2da638ef9b3d1aa75613a8b197709cf896a277c86449370951f47ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153525 Malicious code in avomainah-fragoias-ofatafyfau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9527ba4bdf034a323ddfb00c51f08bdb5e1494ab82777ff4d152e811775a4f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159820 Malicious code in mansila-tiafala-magolollani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43498bbe80c459f548108e280167fcfe8c2dea624d15b3386951fab6672e903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...