MAL-2025-186759 Malicious code in entanglement-jasmine-seismology-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9ccd83a96385818a27d8b5a66cfe8783c5d31de6b3b174068672cb1c3b5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187304 Malicious code in heka-centaurus-nodemon-hydrogeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf4c5450abbd3567bd61e8f6a80976123a5fa4f46e632979d964711833faa7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dniemnfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d28012f9ef6ef563ae4f14dd05da3c10dc53d81950a8c07e0f04d09c82218a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180830 Malicious code in teate-thy-sonic-patu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e09e5e0fcf8c11ef688e7d80486f457ce3e0057d34efbe33b4336c28c51dc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fesdit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda9a752bbdd40b301624090921fdb80af7656c50a3c0723cf068ae5e9afda75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahudd-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51062813b0240b433da09c9b1bb61c1dffafb11e18e225aedef36b475c23d372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d4da4efc056c9d764bad00c35d3ae93acc0b268722c1a8ef9f665e7231eea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176558 Malicious code in nuilva-avaim-rusiavantia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58dfca170666f095d8f1cc8dc23f05732483032aa9f1c890e2702e3b1c097a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171922 Malicious code in starryscholar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff3b8ef6fef3a81c8cb6ebed747fcb1c98aec94d14e59ab1dc7cceeadaa67293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171705 Malicious code in orlasweeney (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377c779d20ab95b5514baefa9c05c5ac8cc9950f42cd2efd3c404c6f213f916b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152729 Malicious code in arif-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecac563896e81d8eabf809aab1c54fb1f4cda0e7efab75d4aec284581ecef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165258 Malicious code in ruji-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd446a0a7e389993db530dcbfe49c558fc7206c9f56debe536619733bd7772b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcec15d6e7c4c48353d8a756fcfa79fd8ef39d6f1369eff0b4e8768adad50092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148661 Malicious code in thuban-postgres-sails-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f7468dd28a43df758284eed823c6994c99de69405aaccd16f7ec88096ee61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong86-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f64bc5b7e051f6f150b5e0c1e46e6174a4f8fd56a8b3024a1c17fa9c6f85e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125410 Malicious code in cici-tek70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc51d6e86208d1701235c370597fccdb5d10bd6fb3f51ebce90bdfd82751077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e488d29b93a69049f5d60de0f9934ac7fbe1c3ac0aeac4f4d4076bec202a2868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-sate100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0dc135d7855e13493eb80314f17fe22d747d1d58f127fd4afb7f9b3387c92e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_moth-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710b1e1def2699e82ee78ff4898c652eeb96636b978d869ae480e478bb9c7e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105855 Malicious code in minimal_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7962f75d1ccfadcd3c60c5e4832654e18e1ca0c8765dc87acf076d42b27c3ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...