MAL-2025-188752 Malicious code in plutology-fusion-interstellarmedium-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35960a2e783fd708a06c72b6b350050e03cc9c26a05631b4ac3c5ded4e9e70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-s-asasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e94497e27316778c49b27f404433f722f82e4ef432b411dbc36907c53b875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176927 Malicious code in nurai-sutaif-danabufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b8fd9787bcf7fb295e5dde750e2f09817c1f326f43fb6f364eb79de5bd5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d41382c6f1312159481822f93a11ac7a12fe492d133f34ee60fab8e8400685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-algol-npm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df4076437c513112089b53d9a85ce5172d0f134afb19ff5def94fb7a291385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147044 Malicious code in rate-limiter-mira-test-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e4c2087053867386e2676432667509cc728c02281ab2bf11291ecf3ce2352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-await-nightwatch-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599b02ee33e0ca172ba387eb8fee06d5bd917b1b51bf2136c37300c417901fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142027 Malicious code in enceladus-elara-antares-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73ab186908d9bb4dde5ea924308195cd1301dab2eab46f92417521d47311c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141630 Malicious code in development-rimraf-celeste-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ad97a47b8597cd4be29bbd8d61383aacc621bfd566c5b2f523e669648942c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-ivory-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82eb57a35b29af05ce640fd9f792f96f2540ce409d14ad557e0b3bd7043045f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bfc4d0187dab76b9e4363c9ca1e4243c39bb722c945d944888dc8374e49478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-bubur11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c233a7ce44b4a6b93f3f81fd3babd45c9a4db4df150eeae92cbd18ebba915d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125973 Malicious code in drab_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93645b9cf47a85338aec90ee17b80e675e8c96cf2316291cdd4e1f5097c3aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129095 Malicious code in ogi-klipo41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f1ef41f265c36bbc3fc88f6addeb5d909788135f33f213d2f0bb0b82a38410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kentang13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6aa067f428fb409524d18b9a76f77f44840fde795bcf7d68280d390fd49388b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-mieayam100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c573c90e0e01381d0a6f029842d20bb21b8f5381ffdf56cd5f82ac617f7ad11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5683c4f2a3493a9a01f63c23c15f277c7f4504f2cafba11a60867997fc8ce2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilstina-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88500626fd084189e9b467b062532ac4a21e399036463f6b8468bc7e49bb351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107238 Malicious code in pretty_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16d9b835945db697af3115607441461accd8f6735080aef4d34432b592b7019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100799 Malicious code in compulsory_grasshopper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343ed15677b2fa69882f6096120eb973bcea42e7af9fc957b6cb57478122c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...