MAL-2025-188650 Malicious code in phenomic-avior-greatfilter-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b201e815b3fed6dff5cf2c8c8dd8e975795b4c086f7ae845825da2bd13da55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187530 Malicious code in ionosphere-webdriverio-module-primatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacb870c31bd3d8e50ddeef025ab57d87c7da78f744eab59b8ed9e85e16b1d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190197 Malicious code in vuetify-firebase-darkmatter-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7cb31503b963b956ff20f68210ddac6120ba9463afed7019619da8b0fdd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47dc2c1e11474712db84ba6e3effbc200467d07dcc428b27023aef7d8695055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185251 Malicious code in tuis-kjt-garfuaavdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3880a13c370b1264399daeae173a39a5e80a31e08c465cad54d80f60b9460c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-fidulgaucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50da768310857b6132f926524b8d69d9fc200267e6e1aa642f074669012ffd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresfd-tehteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8b71becbeebd203d9eeaf4daf78477f3e9d656a23da98373dd20847ea918df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174737 Malicious code in hitachi-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f634870d1a4cce67096ed92b52e12f109b82e4375d496b3a7fee058d86a8bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-aiaavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc9012c96412a2c350600e5a7e612173717fc2c6ad313f9af35e412ead9c8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0150b3c7b71c39a855f051ff21ceb1658a425f33122d242c522b53cd977ae39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174392 Malicious code in goodafin-nuiyg-gibiubaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba89a6bf24b8863a98021f7c41b0e17e3d52a68cc366728f40328f7cfea3732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176236 Malicious code in munufafai-sufi-cagasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4194358ed32e2c7855508402ebf0d072887e704da43da9e64e610a2748a17c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172196 Malicious code in augis-po9r-munapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b614a8ae4e6d390b95da2205b71d6f492bd4454b0ac435964dbb3d945fe21f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171577 Malicious code in michaeljohnson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0832053a03952208aadb10ee748f5ce5648bdaa49d7cfb48ca368bb3c075f434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analus-pafai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 524367e17649b5e31d4d7576bcd2e5c6c9e415d3deb54cdcdf5c8c41e898cab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kama-bicub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4e7bc4b66bc7d839336ad0cfe2da9e63d2adcdfdb19c226791dc910624dad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a639bf06f6ee23c110d4aa922ce9b727574fe48f1c2e2320944fa61ff84ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-ukiu-vilakasnaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37283f7359e0058b571571f36a416981eb01f519637176be133ea3c11801271c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3eec729d13412f964146fa4056d8fe2aacaa3b1345d37bb6d19f2cb9a7fca85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-fogafogfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bccc499d59e0fde499ec72b951aca0aed6d97d41cfe1a4fbfe13f444567bcea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...