MAL-2025-187400 Malicious code in hydra-hermes-ichnology-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f806ffbc0d1c5c2ac9366ab01274cbf1257aad32af0d5554332dde5e7d2e89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189531 Malicious code in slides-public-alphard-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7de09261f3144209c646b5fac5d76328042839266e5a56a0daceac2a505688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188868 Malicious code in prompts-capella-node-config-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5f5aa037e69c5712a92678019d6d286a73fa6b441140f34d4a29bfbecb25b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobaic-gib-gufagouadfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28930acf59e82384ee4052a1a814454518a2f4123daa711e7f2df34fe67097f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-giso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9b2f4e74c5236a314eef0d170151546a9601a797d8ad6a82493575961334fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c871235e4abad00191fcae3c240fc0421804b1f99ed7e4bdf10de275f2060ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70727380c9d36bb18eb7df5ff50869aafc88c8ae4a8fb9991dee8a3df32e742e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusauiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95f0e1932ee015b01670672b9ebea5891b4b5df2f14b7ffb7c5b6ced21d6d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigiyagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b3125099a106cee39ad0e7069d3f752dc4c58083216fb71763accb99c0abcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusisaszika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddc29fe5818f1a4968cf3306b4d41fd75b33f3386111bb7553e990aa217986f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45fe92289839e2b295d452a65ae4208dd084b33743c0b7ef06b4b8b9c087240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibuacamauvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a957b7288fc76669a0aaa9053a1a8198045964fbf4cb52ef8c978e0224bc8443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iguaib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3765f4f4d8f0a39c72665068c3f282be61b048e86aa666182f79707518bf97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38e2d522814157fcf03b92e28a8ce9bc9da548ad69619fead07d51e6c33df3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitalik-don-olikaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fffb32881e3931e30af06b89e51baf70cfcfaea935f228f8a235f888c2cf4405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182950 Malicious code in itale-adci-ykhjyafizgantkool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aae0427e25766609aeafea99e7cb5e286e601002870ab21ab6581e2db4984e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184209 Malicious code in modasiv-kuvu-baiucaufabiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8f5688c2914ffad3f40e1ee5a781dc92fb59dbb1639935a8bd4fd1ccb19bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185244 Malicious code in soniec-kat-icfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfb1923db2940fd57cc29726c625484ed2301eafe3d0210df47c7a9d34fbef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182687 Malicious code in inda-fodja-gifabga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e7237b849df0a2fd1d39784362f22d3dea6e7da6f2e71c973776dbe21e511c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182412 Malicious code in imodiov-kufni-acumnacffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4017bd37bed218baf8180f7a8d67a732992a8cdf361cb6042c6545f2bf75c2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...