MAL-2025-187987 Malicious code in mesosphere-exobiology-sedna-baryon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebc2916450b1644bbe7b3a073d3a0020edb99b9bcfcea7731cb2acc128847b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177532 Malicious code in poglymer-ogngh-agaiagian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925461d568922aa903a3305e15894641f1908fd075699847384d168ab110f02b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-nafauagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816db65723f840b8e644b2fd4ffbde834f7a8ce224a1d9db3cb5ee9bcee3238f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173135 Malicious code in budi-meme-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed9bbe06fda5b87c198d25165e38422f8e129dc119cb9568377b8c50ce6ca87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156612 Malicious code in inufgi-goa-jamugaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b7f453954555f1e59bae87133e10f52e8a5a53a6a2c85f862ebd9741b9a347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169463 Malicious code in uafaru-tauhauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1547c22324ff7c051675d28298468880c75da7e9c04b0dd931962ac54c8b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151859 Malicious code in aiboa-molipe-aramisiia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9552ad86ee336ed8104f4309adedf4331b0c71aff6d910576cafee0a8d3937e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152978 Malicious code in astia-alao-mafadi1af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2be6f1fe242ae811fb91a43860549a88eb6ea713cc57779cc742ba52e781aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiganguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dad3023ce9f15c05e58eae07605108376df6147cc0aa3edbf2fabc4cf89317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145717 Malicious code in nuxtjs-typeorm-odin-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb79bf491c21dcb65a74826c3c2b5bd591827c065190deef19b049a44d0eb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-exec-readable-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fea43b9ddb5c8afe6a13da0830c99b7394d0a0b70da4e62db1deef40a77521a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-vega-hyperion-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc82e9b40a9dd105dc85816bae54c3df108092997744a8455a3dbd46a8b485a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-quark-scorpius-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43670b3cbb53c22e277552f1fa7674fd03d35cfb9fa471468f07fdd90c2e92d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-jabbah-standard-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3ebe5fb767500474057044d4da7b671ac47cc4a6fe13f95c5d1107327dbdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146915 Malicious code in quantum-request-ganymede-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf998a0e7af42b71493aa693ca18e62cde4c66e8d1990b7c218436af02d9682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141008 Malicious code in concurrently-koa-jupiter-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c406a48340215dfc297931ea310432a4f8af4887c0ac52bb24dc2a6d0c56388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137149 Malicious code in surya-miemee75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77768f4fa22dbf84f519dcfdc34813f68c5e2485eeb844c0ac97220e55c3573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128020 Malicious code in kurnia-sambel85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3ec18b515f680f3b2422a25ad583c63118705f6e9b5d283730389d71e09773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126142 Malicious code in electric_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbdbc491d316e467c22677306dc4b21a471af8ff57766ae6e3fb12694199e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125138 Malicious code in bayu-rujak35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a04a108dc0ad8f473590350fd0b9f16bcbcd4460a28ea7db0dab81c2845228f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...