MAL-2025-185826 Malicious code in biomimicry-kuiperbelt-castor-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad2bcd54635313a28e29d24a2fc5ecca38fe189b939fa57f7af1e460466698d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190058 Malicious code in unix-scale-protected-test-fire (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696a986920e12bc1e3cf84d12a5c637dbceadbbaf002d52fab2ca101305fe795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afmcauncxab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2ce54743ad9f0510657689bcf11d6deed02e8d2e03dd6024b9ae4f1841716b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoerocneamuaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138016fd757f63d4b6b558cead5c2aaffaaec5c3d0eb29897799638d6b393fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3526d8756b30184a19ff6014ac0972fcba170d20b7268869505b7e1ffa4372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310f369ea5aa04ea5e29b3c117b109d835e0ebd81928d10619c294f2eeddde50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondnggangru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b7c3bd65e3cd649ae60800ae0002f713a8f749539326c582b2f589693530d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangtengdytdjdyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a1d9318125e50d4be4a156fc73c21eb38b0077e276f4765871c45ae9bf604b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693dda8ac96299c2c24e25646fe9ebcce5e73cad9ced5cda6f576e6dfcccdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavuggjim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a3bab267f8976b2e02d2b3040a3d27cae515dea16871a65baff446188b8fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujihjafdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d875bc92a83bfeb02c0e3f602fe5ed3012a5f8b4be44ae6ada8924617780be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e92b934eb64c290922be554dbe6bad2d27b149bf93cfa109ce32d1a2709cca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182977 Malicious code in itale-dci-fyejsegf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16976aa8a702c5d3d4cfe5a0f74b0275e72b3b7fce826fc52a4f5229110c8b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182696 Malicious code in inda-fodja-gifaiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1751fdbbbfbe50f2f844b68cd3389ec0ec744eb1cd84e3ad7d9a659e840cc785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182461 Malicious code in imodiov-kufni-uavcseqaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f1e644b2ee581f6c33253618a58c48ad72b08f735d6e9a12ea9a6e9470b2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181666 Malicious code in astam-ift-dabulikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6f2f5ec58d3f1972b2e29651365a51c1c55077e2500fca017fd08c49c8030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184249 Malicious code in modiov-khan-afibanavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47c125cdf6f561eefb04c00aea99d11481d50a8bc01aa3a82630a71c87bb473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185124 Malicious code in sonic-kulig-tgacedadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e29a26b3e252146ebac0149cfafd1e7982c324db07293d294dc0fb873f45a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185286 Malicious code in tunis-kjt-gabisygf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e49c7c35be072c0e0ab50a8e54918f119631df7a64c39ee0d585081e772803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182013 Malicious code in flights-lutuig-adi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397027c41cb863e5de3bf9716e9721952553e56f9513139a1f591d83afbe0f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...