MAL-2025-188129 Malicious code in morgan-sass-loader-release-it-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c153eb6fd6cc614dab9d8fd43c3d5a0e5258e9ae6ddd573ad103e2a78cdf4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187442 Malicious code in impulse-dependencies-spinner-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1c5ba732a67d3f66094e9fb848726d7544d82bb0de3c82c8ad2e54e6932cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186975 Malicious code in file-decompress-gamma-wind-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18eb3d3f0daa811ce492b9531635f4cef64f89da0a246e6005ed0a1dca836ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188922 Malicious code in proxima-uglify-js-biomimicry-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6085fc2c81e721b45c04ee516ad7a516391cda5a680b8a0f5a453e4d561b21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba4af3582761663277689312c3073408897767d94b09a2faede41d8fb8cb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrusyyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190ee04c33090a3cc7210a782cce1d6a8850c11e6ef4e0211fa87201e03bacee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18126ffc4821ecb116c0aa4cad953679d9bb49e7a39195d1590d8a1ddcd3568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-bav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e483f02a845895bf2e64288cdae1d14e339134d342840715765852437defe1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec57f0a03f529777fa6a6bce7577e812f2dbedb645fc2bcda781aae92a56ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifayaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b2b0f61bf024128737dcbbe42e099d5be6e31d7ec8a43cf8316f8ef85b1114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6be30fbda6ac81bf93ec7242341aba4a30d795b5b784f5f87e6f417f1dcbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184064 Malicious code in mitouko-on-lakoikauk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4e27b4765dacf0dc409cf3f9e1b2686d17d8b9a8274a8a1586c7af2291812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184802 Malicious code in poliaoz-aiksdfo-alfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347022a93ba4cf38fe3d305a0bf71431292890ebfdd79941b8372d4eeb204933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184770 Malicious code in poliaoz-aik-avuhusibvaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc71c714bc92811b886b32f9afbfe27994ec75d9a07fee0c40f73e25a5ead4b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182889 Malicious code in itale-adci-gnuygri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae46962a7d26cf84f6ab8e4dfddf492438bcde436a801743bc4c5916bc7bedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fafunig-amfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5295e23d3e705ae40d28decf746b543534eb203b88d2f28f3dd3d45de0348a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiut-acg-avefivubufuaadvig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8b2edd4b9f94972839552c42a1926a971d1d38dd831c8c22821ac8c05a7146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f432ef17e34727550b0f292dac515fbe9bdcec4f7d918f087052afe199cd0347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-lejiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1a1a3bdf1645222306397cdbf01881baa9e50a7798ef1f98297f5f8459c6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dufadiuyban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0d27ad4b45b1e0b957176f23dc2e26f47c4d5387b3d3dd7ca01e750e7cdc3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...