MAL-2025-189678 Malicious code in stratosphere-outercore-carpo-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6635b5e7c8567581fff96e0e73d61700da8a301f0a1622d9a3c1e79849f99c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafivvuaviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d87fa50f3dfd346b69f6f120675d953669ab105f2f519b84fce15cc58751251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9deabfb9250c6d0d86204c2df519f91b7124fa40f48dd1df9b71e58be3f34e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182006 Malicious code in flights-lutug-adibalonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d039f4b737e4b629158dd5b7f57189db9eebf3d2bbafbfe415b14222b18f117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182854 Malicious code in itale-adci-ggpantekkkktololgujrhyjhbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56da1e4dd5800c3fee5fd84f977b31dffb79eedf4c59c8f66bedb1bae3d592f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185045 Malicious code in sonic-kots-fudvitifagyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0c89549f18c7196e8a17b69fbe5a952bb6def7e4ba58510ff5fcca315ef8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183943 Malicious code in mitali-don-olikiakibuamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36199eb65da9765028c00486e61b1573c173b15c511423bb31899a50e5242fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181784 Malicious code in avangi-oliuka-tao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817ff275584cdb911180b4c7329427cbc069e506e830644435589612f6b763e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6e77349c4994eba040c29a1543c6ab52b03e9df17883e1ae20d9dd4497d9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df039242bf00b857e00532f538c3c5b4ecd6fd4b13bdbe2637923a1198d30467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugaugadsafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f9c427af48a4d09563381880fc698aa1a58e0972d188e06120775cc90ba4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-boffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0004da799b7a0238a911f9dc5f688e974fffc6b01f9ba7764f34b00c3c10df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecc9880b9618bd6bf5e7b048665bf08206705b549143215e0c615be7e12a311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184932 Malicious code in sonic-kaos-fgahigyafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2549378d5629d502bfa27a7fa175e71b6565c54e5cebb8dcbbaa22705ac89378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab90537b0dadb0f33ac6ac45e852469b1e9881ce0dcdefd6604f2ae7f8ad1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184063 Malicious code in mitouko-on-lakoikauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c007b5aa0b16ad9b4310ef45a271b637fe00f53b76a0627759bfed02ea40d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182311 Malicious code in imodiov-kfi-cuwabimagvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa67e9c883ea8ccc10647d7f1646351355c60c68f495ea18e1894ac93703e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183496 Malicious code in lobac-uibg-abuae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ed074e3a84d63f7b2d12d31e92df1bd3caf81d230d3843bedc2e832ecc773d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183698 Malicious code in manu-oi-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e8a471912b33b6e4113f390d5ffa2f3bfd3d57e4635eec9141c9a56c1d1247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181839 Malicious code in avangs-olioms-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28a2f27add803d710b030611b1e4b08f5430c3a52839891532a9b83f8909f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...