MAL-2025-186473 Malicious code in dagda-polaris-entanglement-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5325a6a4cc8abbb32dc79710052d24b808fd1692e4b2370bfa9cf74f61373dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ichnology-ursa-petrology-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6f4fcb17fd416bbfa643799f40a797e324953f86944507dce411cb5d4eaf44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183270 Malicious code in kisut-diufg-dv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68957d382b039a663bd700fc2d83feddb06b78a310f52246135676127a6c69ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokik-oni-oladiaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bb78545dc9bdeacf5fcc1720cd2b74f230c9beb4ab9fac6d9833ac643f6e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cobsabubasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4ee020189702e7b97b408b9acf2d218fbc36e417269d034fc181b8dbfd66f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183223 Malicious code in kisut-difg-diguafuavaota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e621cc5518806235fe87c084e6d740b36a8f6e71c6543c3bc535afec0adeb157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-jamro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bf47825e1a6ad846597c20038caf6b4aa91b84ea6c566a0fb23412cd53f3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6572fccdcfc4051e4fc9f0a9f27859225b9f3e7787518d50c91f5d5961f5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173644 Malicious code in butanaih-asfafi-daujiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f20953db2bc96c964f97c831ddd62ba5aee3d0c38f97ab24ee105a2ecd70485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madisonperez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb8476d8446bbeb0aec14afac5283214538c51533b29d3c053c96b6369e4e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nathansanchez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f30f6edc420181e67e39a0de0b9cc3504fb97c8638fb32c5f4930bf2867259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cometcartographer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6ec7a53ba0176d9e54f2829e13d0bec56aa93d14a0d658bc48f81d6c8e66a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150105 Malicious code in @mipta1/ksofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831028648104e2ba1ed802f61966c716d99556ed13dacd08c71535dbc395e999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-tran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb8ab73d47170577c9e12cd8d3345cabdd0405997475a492176d2ed5b9021be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159537 Malicious code in manaf-marzuksi-majaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9f911fd3276a4c234c5cf778ddbe4637aaa276e1d160072ccd94bb6a55d754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149609 Malicious code in xanadu-run-script-ceres-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-magellan-buffer-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19433513be4ae22b3df0ed3f88b8b07c85bfb541265eb392bc91c89d720368c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149748 Malicious code in xo-electron-builder-passport-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4258594833b0af81aec1a8b3b0c76e3583e9312af81300ca476bb04013958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-telurtahu56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5362859b605d7ec1f6da1f5ed369fff6867d828b5a857c129a6071428fed4686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137230 Malicious code in tania-rujak2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426686d499c572546718b2534a5633101b22f0c93d6acdf94bb7c381a811696b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...