MAL-2025-188735 Malicious code in planetology-deneb-betelgeuse-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9e76fd68dea4a218da7554c4a828cd8f512e9399f2f98a6ba89184f1e1ac45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175198 Malicious code in kapvino-socnvi-bovobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0133a5b24a1cc531b5b7a8864304d84969ea192d415d680008df1443a90641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kashifadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57f848fb290698e6b8c7bbc8bc670121e4fe1a37897d4e678709f0a09cd922b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc854ba2dcb8d90f382db5a9b3535660189fc4a6364c27dd135d1c82432b12c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afaoti-ufyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076a6c0ac0b4df05e5b7762537d506392b591503277dee03c10af65c128a7540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163412 Malicious code in nokire-sekiya24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67046e096ba23b6935ae4df9ca0c2a9a0eb01f20286ce2ee5f6147087590cef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168056 Malicious code in teagood-yakuza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7eb55b07daf335a2f75e032e4041c32e8b2e6ab543d1da7398861843d462ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-bellatrix-slides-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27c31597941ce5a566db60d7d472f7a2811fd08f8476dbb11b9074b61a8d764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-socketio-development-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f4ba7bcceda7e6c47a55286d07be81507c98e76b1293b35e26b1670af017aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148485 Malicious code in taurus-xerxes-hermes-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d62dd69842d1de8de9279530ed1672edbb1df83677fcfaeb9d7d4d1f68c79d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144351 Malicious code in levels-carpo-fusion-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d8d5f23e9140fa627019e2ea08fbc2a8abf4e959025b337ee09e444f301e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132939 Malicious code in double_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe807713a12f26d83b9bf1cbef8b223469428fdb7cda1c835dd228ca7cf3a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-ketan78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c3bdd3ce10f114917b48d89315b828a551f5464f03846258b3f7210c78a36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125672 Malicious code in deafening_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d24f466f3cd5123af6d63ee1f689c3e55e4ea2e53593d0ec42600bdcd8ba0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126647 Malicious code in full_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67615d2d2eda356f00b0ab85bed419b5e11a4d676d2e8a9026f1b8a414a242ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118336 Malicious code in yuni-mendut36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc94fb93ac46c4361ab83157795d0e4e35d290cfda99992e91741e5797218686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115543 Malicious code in lisa-serimuka25-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a7b14dbd1d63b3e4c9dd3cb2245a507fbce7d254179ebbab2e2c405137b546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_tuna_fuchsia-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac109c05def627fcc7cc22e5e0d9307c15160dce30afa6a13f42500a0de3a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a69f9607f73ad846451f681a1b777a70264d9bf2b4a28c06c9da6d54ed3770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-bika27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5cb7820727398843d71788338c2d581ae441fc1aacd0756314cf6913bdba90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...