MAL-2025-186934 Malicious code in extremophile-ophiuchus-rollup-plugin-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5814aeadd2075aafefcfdf7e08fa80138940a6d61e92b031d99103d60885e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186663 Malicious code in dysonswarm-public-mutation-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc07300ebca2f8b26a8d75a123c9110acfca5a9c9ba7c5ca0e175771df0cd378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189163 Malicious code in release-it-indus-promise-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26390b2e466ad38565abbe4463e6ef01196106534541f9ba58e2d1c0c397248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188405 Malicious code in old-export-class-cron-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de005af7b5e64e3e82f9ed4604efbf0af837e477e4013fd75f9512922040602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190407 Malicious code in xo-koa-metalsmith-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc93d08c628e258a21edbc1a71b39f0d152d7a6764acf3855fe0a3c44f76f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-betelgeuse-sadr-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d981dd2f34c2bbb86c7ac516f54988b4077402f3ce86235f4cab5210ee90865d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihn-afbaufcaducxabnyvacmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e7abd477d3c6a07845b0ddd72b0c13e7cf4c802de3e1c037fefdb962801ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaguaguaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81abfb7e9bdee0d24cd2137f6afb9a43644bff9f2bf4588bb03ec11f8a7956f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276b04782d149811dc9305d2ecfbd7c083261dd68276b4e37f93efdb1c8a0d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7611af03877b6e5c389e7a7804f68ef7ed64c73b3d132fb06350cf7ae2d0675b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmullfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4dd6c87dac47abe0d3558bb0e33ff8616fefa127701a503598b9f381125b928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c441cae081164986b992f7c25c7d16ce7576c0a3e227d3a06a5abcda6209187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315906dd4c81266b4b476d40d475a471d83bc7723d47d7f156a29ca9331735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a81d3762cd8db4f574437e3d530cf12aaefa09bb4e01362a8976355a8047a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaiofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abfbf37a70f764b47d94fb7ac89fabb2b12abc560af25139885ff4c645235f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifuilit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ee287d0f854e2ed88e4f1621d54fd69c0acb10cd279a46e3bf7b5f520b5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diguafuvaoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa45b7d73d3c551bdcf55d053c6b768bbe5afe7b6429c79985ffea31ab632ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-ihifcyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce998cf0b21fc851bab5fbcf124c59347dcf60a58b628058eba020ef03b26ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefederdafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d9efeee38d4f2eb78455cd5f30d9b969555c180bdde6c2b263d33ce8eea021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daiajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a26cb06add0f09e8cb8198d029d2c5768028fdd2b6f15541451e87d87afe3bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...