MAL-2025-187278 Malicious code in hapi-protoplanetarydisk-halley-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14eed49e06d77509c188f6aa28a040fdcf9a987da14db1f3667f27101d6633d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-mui-postgres-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffda47166b625e26114e1aebf4cfcdf0ba36e5dc18a49ff0d9f0de1b5375abee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188721 Malicious code in pipe-oortcloud-void-volcanology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396cae3cf577124eba1d39303feb623fb7e9edec9a55138cb0b465ac4dc20d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188579 Malicious code in passport-pino-library-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dfd1dca0c0311db7a37091bd349a0f55ebe17608d41fa2a8f2117a71407312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190135 Malicious code in vega-toml-hexo-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb24c32e4d09b99287614e8f188638625c244dfd0b4f79bb5170f0788ef9b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189526 Malicious code in sirius-yonder-algol-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253c03584734dc9e8e93d7161dd055c0d90d428edf1d0c4c967746b29f5ba449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185749 Malicious code in barnard-perseus-comet-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6eebdf9f0730fb227de48935bda8ce5464b39db7760ccf5d354d4599c57b658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72961222466a1fed7649e3d873db50ebd763959952762e8f564c9c1293d06773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-good (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6753b821f9228cd0cb31f26b0d9cb6549362717007318836694c9cbc8e0d74c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imanmabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e9a20ab5095e3f5b163aefa458789051309ff10a51ddc99b592755be3ecde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173012 Malicious code in anita-butaur-mgids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dc44a25a91942cfa74710fb7e6e62a2b704655537d6ce1f30b6f8e2a093209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175965 Malicious code in manusidda-manuidais-manauddida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d96b4d1b5e6a3275d9e6c50a1a6acfa4d5104592ec2dc7b0059dd802690d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1216489a7117caefb0344003401e35f2ccdb0d5343b5e4cac63e287630d67439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lki-kadgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445db79098adaf31db5d1abd6bbbce22ddc0015b7c7a1aac939c0ace16fbe088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163449 Malicious code in nokire-sekiya58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48f130e97693e1542f97064ef95ee26011e7c246f826211e772f5ec7fd884e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275b4b7615225ebaa96236d703eb572b09673f4cc7c602937ef60209545f6a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amibn-aguha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4720f4b756ddff7fae22a770b77abd9d22844a6d6642659ad2c0034ebbb82e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-nb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f9398ba3c6c3b96ea5926f4a8a5e347eb3d2c43c6ab226219c513724f7f5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-upuasonio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242974d33d9a6b8e10634db9b520bb059abc531b36bc8efe83b6a48ab4c96731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afisgiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262a5d13c2390cef357f6a09cd7f08890220affac91989edf18c8fc1742c6730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...