MAL-2025-186352 Malicious code in cosmogenic-polaris-helios-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e6d3451b4d5f0da4f77046ec49acbcbb8bd9dd42f04cc2a46ade4250da3b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187186 Malicious code in global-sadr-polaris-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758efa7f7aea7bd87750404b0663d363a1b4c383ad6baac3c731c85ce6b1277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-cryovolcano-darkmatter-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2558357ef70a6fc079199ab0ba49575fdb5981e5a25319670df41141c2206874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189310 Malicious code in sagitta-antares-winston-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddd0b309f243a59e5c481a498f75eb1c403e12809499a7c5b5fee2a091da4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-winston-neptune-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565a47c433c4528bb7ca882f19a72714292b446d620d3c6037f544a29bda1783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186321 Malicious code in cors-zenobia-dagda-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4774c26a7e13e3aed6382b1e29215111ee924a655f6e4f8b58e9d34e7329f447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fermiparadox-graviton-brane-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9262fc1c11bb2ad7e0e11f6605fc6d66a164fa4c863661fdfee73f4776ba5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3637c4e46d4c374c0cc7aecc344a8bb57e219a8b36741dd8cac2d9a8251d629c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacamuvaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4923ec8af451965580b87442e25410fa7c291de5a953ff06e11abc8f9165a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fehjify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941642d69d5979455a40ecc361c3b11f9d386929ab443e77039430e4c9ffef61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183326 Malicious code in libc-ug-aguagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e559eb97c28fe0a50eced0bd7920844a7e79e055459340ef72ca941eaebdd4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184842 Malicious code in poliaoz-alai-ava0ubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e8c24e6157166762c93e9abf8d00423a21f73d462b1c4ff370e3091784b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-daliunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf9e3c4e090244c0d18b8ff7fa50a09c5f1bf94e05c6f189dac63851f0dcc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182459 Malicious code in imodiov-kufni-cocakma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dcd5294a15426b42149fd0b96a4e1230abc1d472d1f1c869a1daf3e3a9c9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gii1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf1317c7ac27d90e4bc5a1edce430c8ced6b957ae25f49e571c9809b4185a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181837 Malicious code in avangs-olioms-nolisf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31624230ab762945a6dec8cc424141c7e9c5dea7f79281a69a8e8c8f06b22e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184427 Malicious code in modiov-kilan-avumangafaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee476e010963eec4612fc86f9b191bd9f06e4c3b7d361ac10ff6ea920ba7a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaompmng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c35e0d7bc4c8e917113abd332d4e1230e14ec68baf57a4a1a3b0bca8b4d8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisasioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64449c07366674504895aa2987a3546e7278caf5847eff47635d1a5e27ce1115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181335 Malicious code in @akunsansan0/susu10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1a7efe930f70a9cc305bb5bcb6b2964d3a3ea17922ab0e845b81e55fce3456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...