MAL-2025-188638 Malicious code in perturbation-blaze-singularity-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d94ee357e591d02062c95c64888251cbd977c18af9279759332c2d7380f162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-fork-pavo-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238d311463f574170c5184cf88b55be3f9775159d52d35ba3b1353ef03901c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-nightwatch-nconf-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e249e84533ba3f5ff5d0be0c07b16886f7c224e9148d494ab0f395877026b2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-darkenergy-neptune-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8e7dec04b1f7848c420cbc1d806bb0e2aaf9933831e68559c22c7c39a63051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188155 Malicious code in mutation-local-archaeoastronomy-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ab62bb148c77dd2d5c67896079fcfd49954b6069a61c7291227b75beb98678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifadifuahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08cd6b4f7de85138cf7544b10638d45051e095cf215d447a534bba6853466974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-ala-yulabku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b275adef58f80c45be06888f60dee89b695fc74d55afa7649b8d5bc34276f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181721 Malicious code in astam-ifut-daoba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eacd1c16aed478032e64183fe74dd98ba2f6e50125f39506c07a51c6f1b3553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183441 Malicious code in lobac-ubb-gafiufuuffaub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8988df30ae7c82c5de98144939dca8027255f9e087776b0e3c354a4f7c3a1cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69c9275bccf23da81d79e613d69d5b9e43f7879a5daf931c3a7fc79c61b1e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182016 Malicious code in flights-lutuig-adifaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7acb1f2c077462f532cc5d4c171f3623da9cfe70dd90366f196d2a707f8985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181254 Malicious code in @akunsansan0/cewe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4878ceedbbe640d2847be444ca032b5aa6abd3b621dcc8dce55e1a4188d45ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fafgap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25527359e75e174257817efe0a3ce6f91137f2dc7d09359a15fe1773361e87c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180866 Malicious code in teate-thy-sonic-pusge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c017212a6a74b133e1286052d575124271fc94558984b44406ddc5eb3e6a23f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7a15529efa8aade43cb9be7a722c1b12b9b293b58ee214493e3b2e8f684e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-ggfkaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae518db67266d808a9e6fd22a313c0d9646b03417045a43fb40dd64bf2ba74c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174260 Malicious code in godiun-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b00c841a844abe148415aab470adc61ef5b8df5e89b167f8871933cb265f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173835 Malicious code in digo-kaism-okalmir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7919121697e3524a4e6fd91335fde677d1d127c508ad5fa73f22016f594151d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-fidaobi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387be7dd9317b10c3aff2b7b9061ba36564408eb2af23f94d84cd6a59a9efb13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gadodafaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d356338abe5ec6d40369a3ac86b98db5b00af02e72f2503a8c3458beea30a6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...