MAL-2025-188222 Malicious code in neptune-lacerta-accretion-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79e1ddb6667e6731c2582306c0b23f831c629dba94e4bc6165a1b0895384663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186826 Malicious code in error-fast-class-visualize-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ab6287114c993123a1c774b449f01bfe2dc45a5f5b310517d84dc224ebd170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187541 Malicious code in iota-levels-foundation-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c2b0af1eef0fba29bf292945385ea48af585baa02b34ea53e9ae76e24eca73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-transport-eridanus-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132336594566f83353e8d26153b7eaa947954f4e3280dca688c1d21777f60534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-pipe-promise-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02106f4c3f458d8b414958c8d64a06a816b5900d86f0c97e5f3832b61b9f28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186137 Malicious code in chi-mu-socket-cold-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c962890667949b1dda36ebe56787555eacad6d8b589542c2a0f944f45c3d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187961 Malicious code in mechatronics-deneb-bunyan-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d599caec2bfcecde9b1d411603b07dd551398020115dfb5d3378fb712c2a9951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifadiahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b530559eb17999e080904c04f92b015c7dc40f11441378bfd71b03a49071c70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ec69a80dfb84c03c5a4b2d9a9f81d697315a8ff78bf65062dec25b79bdca53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da57976355a45b7c3e3d81f52626f15dc06c3b89be5f226adbefce786c3a1210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad4610217d9a297aee3cf041c4ed4f6ace73c9c08b175df9ab0866a4e5b3122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugauadsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec83d9b8ec067658d52a6dfee9a6153316afab3b1d5f387c0e5dcf4e3ed319f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5573713b25e7e3c4a743c81ef1024c0720a5612a8bf4cdac1b5e14ab8d857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfafud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92919d5e1929192664be55c601ab141a80a687840ca4a64f07fdba7d26325496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126cb5404315db1b43244f4afe3b8d2b34b2d80d534e41a150acff53ca551188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181794 Malicious code in avangs-oli-abarani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f70fce69a46031be57e7e73a2b625b94a1766923a4be41504ed1402a4e0f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182608 Malicious code in imugiay-ajvg-dnieamnfaupa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b93999b4fee9a350d349f3be5416709e6fcabfe9fd43c4002a43980f3f1dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182457 Malicious code in imodiov-kufni-cocak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59073bb3f419d2627e4367fc94741f4505c398412e1675e19adbae137e7c74d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-vivi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addd1a4ad3f3e7959b7e1f0bdbf392ad038ecd9a2b1573ab57ea8c9a8cce1954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc47eccd57d192a5ab4901ea86a8de5b8f42f9f44d3142464c9bd189ace6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...