MAL-2025-185948 Malicious code in bunyan-radioastronomy-interstellarmedium-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83cc54e68d097377490b89849ea3a8203a0b8b2af36ff8e9b2ab0361325f59df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-octans-grunt-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6453ada94af1f9b899d8eb2790c3bceede6d346d92601996f8f8fc7cdd7ccc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179483 Malicious code in anabuyil-inanhu-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0631d72fed46cdb91ad5762151f9b9c07a819a6f1faaabfdfd54f69709bea34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175612 Malicious code in ksai-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cdd633d6dbd4a5e7ad0785d92c538f6e0589fef7905c7a5b255a3c1db455d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fd55ef6f15cafc92563f91fb7d12e01fb91b313688e89fb3613cc81ad3f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51580b4a53e941f48471065c9e9c4a74e46f789d460f1da57d21f246ddf7392c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34419877cffd6b0c9e3c7d9a1dd33fa02e30d414107ef6dc13602970a646d469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83d7e3a348a2e83a9df2dc5ba40729d9f90c3fb8394365c3715f43c40e3a622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142710 Malicious code in frontend-module-tailwindcss-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0a42dd3cdb3164f9a7e9e88a05a7fdb8d309d11dc69e5b66054ef4e34eac8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-restart-less-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f4d0056d31b5a03779d08089412376d33984c089f20b0c1f39e54e7df1036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146654 Malicious code in promise-umbra-achernar-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfccc064fd329dd2cdac358fcc4e424a92bc45e143066d8dd5c6ff834c8a6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-nasipecel5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f534aba9da44bb80ef8b705ee2897aa0087772dd4222daf332df808941529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-serimuka22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995c8287c8d0cd28de131ef5b84b5a0f8656d37e92e823d230460cad52043daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-keraktelor41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af337d67e29d40d6dbf9aca24014981aa374e345a2183008ffae2a51b58e9f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-bakwan63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f07007dcb2ddf5187a9bb2276deaad2b3190bee1d860b0a6d6795e8800ce7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasi73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2d3f0b4dcc3003db7321b00c35a5ae58011949b1d144ab67b9023c1e4a89a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79801 Malicious code in lutfi-telur57-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf889a9f0959a066aeb0c080e00298f94963e4215cca4ec92c045057a65d4f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal-orange-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754977a6ea10f4407b8383260f8980c24b916b09d26411456ccf650e00507cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gepuk82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f79b12273152e738995d437cfe64f5625454174ad91e2de804bb51eab50da40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tongseng82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0e378f60511240ba3c07fa1d1b5e5603d212164cee9d4db6318cc387c1e1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...