MAL-2025-186527 Malicious code in delphinus-paleoclimatology-stream-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d619d01df637e0ed08a8b5b8184ba8a98b8c2e150823265edee3ebdfaf9a7c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunise-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a205d995a596dcc62e666ca040d27dfab0a5f2c7eb4c42b9911cfa803e4ac13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokmiuaasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb590d84951f8fdb5dde8f11d1ea053dbc65b7294b7003ce75922284e47a385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-albu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a6c93c379fb110dc762a2570dea9bbf13a5b5c976c66747133d94e8509c1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180401 Malicious code in teate-thy-sonic-fujku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c7f116b343982917e66b9dbac81c84146ed01ff402a4ede69f67659cf7b3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384abbfce40751267521cd49fef0093c166bafd44ff8e231a152984cad0ea7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5421128a1095984759952d96bf0263674c8466a2312a536e6cd0b80e5ae47c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laminebaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6106c3597aacfc2468eec20391f800b113042cc05e41ea4d831fa2b78cb331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171763 Malicious code in rashadnaseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6302c8357682376a595dffb8ee2aadb72a802c8c059a84068a3f69c85bc896f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171975 Malicious code in urviverma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfac2132aae55e7230d9070efcc315728d8bc6427eebaaf10d330a921e516613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166488 Malicious code in sunderlan-uyud-vamukapalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6347562da1aa1f5273ce3e5f8357c9588fffb5c64cab6fe221a2ac1edd07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151248 Malicious code in abiba-alvbai-ayub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c962e13efff555daf7dff445de82f95a278028fb080e83b77a473e64df54d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160473 Malicious code in miracle-dibok-iku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eb334653ccc8524cef0ed13c805d0995d2621129e34544d85a8e4f64f6a587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150692 Malicious code in @miptaa02/ghdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a4268e1cd30d5b1fc057b7ba0ff7679534eba95f4f30cf62de6c943c08ea20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe538ae77127532d89fd1856256c5735970292bc6184a671f161a45d2c1317e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170106 Malicious code in upa-lubali-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f343a25e6699ff8ec30b399aaf4128da382d1feb6d46e1cfe699928d521fc9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xfhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a844c799d99ae90771c5a70c6cd2aacf9da9da681e150ec7390a7fd9ac372f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fafdoafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2852c0e23fe360c74e1a59203f76d8ce5a19f3e915dadbe526bf3a84c7152166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed047307f3ee8b69a64788cf62bf631be7f94f107e3d5ea04836ad8a82555b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...