MAL-2025-187095 Malicious code in gammarayburst-neptunology-helios-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1639aed73bc43db96f2914d88cdd73979fcf54d713614aede5317f2945f3d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187833 Malicious code in local-ariel-elara-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa489e4c2ddf5f4b238f4e89d02e3d3631e672743ec0775984f02753467568d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fngduyge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae4ee65de2da1a72f4a9ecae4393c1589abc667c295e355c67940d3242da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2381618fb04382cb6b6ac8f5c237372ed847fc0bb1b5fd82466d27c28637d739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisaois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f8c3a402b364ef8b8c02e6590540f77ebace7d2165189450ab75c9dbd9d10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatufagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad99c325aa7d22b00a4f8f02cdd4677d7304c4148409e13f741d18b90608e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182748 Malicious code in inda-foji-gisagabuilan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be9a828004e557fee23f6837edbf9d1a7c160352e4eef6395a386e6250a4c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57898fef6929070fe1a668ad66a7e0eac73eccbffb35ab0ba2140f5b23e5789b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184649 Malicious code in odasv-kuu-bofauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671ac42e26ca631bebd6ac8cc3ea966bb11422ea27bb3c80c3d0fe49fd5f0c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181740 Malicious code in avangi-ogoa-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ea9805d92c354897ae452edfdbc6ceebaa2190cbb03eee83f6a185eb8f7214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185095 Malicious code in sonic-ks-fudvitifagagafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c71522860084275c5dba8101abb6d530bef331b8edf0569b0f44919ef8d9783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184872 Malicious code in sonec-kat-fidulgaafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 102ac9ec2e79a1fc4dffbe89bf2d8d591fa916118989beb150e07950bd4b16e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183999 Malicious code in mitok-doni-olodaikis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd9fe9fb328b5a20063f9788bf2f6343e65667032e4fa8b8d095ef96a28f612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8e18f38edbba8b29d881ed50330de5f917b458ceff9378ee7ba9cf48ac9e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037fe299eddac5e596eb43434e60ab3e6d0f2945568b168031ce7875fb033ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafiaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed055df0c57ed1a26e46920d6b582b2f5d1efd76d9725e7879e85e1416c44d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gistsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580c2a19d202109998de5c16fd76146b3dd4f2bc3d42ecdeaf88ab9cbae66e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...