MAL-2025-186527 Malicious code in delphinus-paleoclimatology-stream-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d619d01df637e0ed08a8b5b8184ba8a98b8c2e150823265edee3ebdfaf9a7c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunise-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a205d995a596dcc62e666ca040d27dfab0a5f2c7eb4c42b9911cfa803e4ac13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokmiuaasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb590d84951f8fdb5dde8f11d1ea053dbc65b7294b7003ce75922284e47a385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-albu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a6c93c379fb110dc762a2570dea9bbf13a5b5c976c66747133d94e8509c1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180401 Malicious code in teate-thy-sonic-fujku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c7f116b343982917e66b9dbac81c84146ed01ff402a4ede69f67659cf7b3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384abbfce40751267521cd49fef0093c166bafd44ff8e231a152984cad0ea7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5421128a1095984759952d96bf0263674c8466a2312a536e6cd0b80e5ae47c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171763 Malicious code in rashadnaseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6302c8357682376a595dffb8ee2aadb72a802c8c059a84068a3f69c85bc896f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laminebaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6106c3597aacfc2468eec20391f800b113042cc05e41ea4d831fa2b78cb331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171975 Malicious code in urviverma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfac2132aae55e7230d9070efcc315728d8bc6427eebaaf10d330a921e516613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xfhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a844c799d99ae90771c5a70c6cd2aacf9da9da681e150ec7390a7fd9ac372f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150692 Malicious code in @miptaa02/ghdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a4268e1cd30d5b1fc057b7ba0ff7679534eba95f4f30cf62de6c943c08ea20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-ala-mali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d7bbb836dde0ce2119521545b3f4fad495f266d8413a436218c6d15a491758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164626 Malicious code in ramadan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849688622e953baaed819723f3f130fb58f7da7e4339102ad0353f3b3c993613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166488 Malicious code in sunderlan-uyud-vamukapalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6347562da1aa1f5273ce3e5f8357c9588fffb5c64cab6fe221a2ac1edd07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed047307f3ee8b69a64788cf62bf631be7f94f107e3d5ea04836ad8a82555b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in matane-rasaa-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361ef8b2372671a953a0af13f0a45673d0ee85c5a37e63d7852f81e8426ecd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169038 Malicious code in tehah-nutawar-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e463f134bfd7839ede8ab9d5ebff1713813875eb0a670dac7e935b2d3195e350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170106 Malicious code in upa-lubali-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f343a25e6699ff8ec30b399aaf4128da382d1feb6d46e1cfe699928d521fc9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...