MAL-2025-186526 Malicious code in delphinus-miranda-postcss-loader-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0bdf76910544de6f7f52a3893e80a33923959859d77b7bb710fdc4a41378e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185584 Malicious code in astro-cors-pulsar-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59931b01fc60b27e9ad893bc7767e2c241ffa9fd0413df3cddc31dce9fcac8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187592 Malicious code in java-short-string-java-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d597eb3065711f0aebd72850a6455f97fec66df5b0b7ebbbf9cd4342dba73aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62e5d3d14578a2a596702b2060c83eb6b2f05d1bfeeec977904859dbbd4b66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f947b63055c45190f93547ddd0c9d0f37723e3bed69e803733bcdd42e7af7425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indexa-fotadio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ae94c599719c0839f9b96f0eb1d17e900c3c0024ed0a8010e1789629fb5a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrttytr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ff8fece47c9fc297ff4ce2981b975853887860a4531ea070506a17dbde7429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrusysyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42093684a00b5d297d4b3b23901d99c50a178355920d27359621806336f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rshayt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67f9aee887cf6bb9f546f0445f1c7cd84d4f2bf8577db5ba7fd81005890fc98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-systrt4tf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c4357db147e0cf23d40e4e42e112fadb8c41b0528c23a5df30915ad082c80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafiufug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42fc95a2d78c0efa716ca01c0dd56ec4121709b43c877684a3ed2f15cd2b52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ce6fd1c582a2dc4c18581b402f29347c8029e0b1c5981f1870b3c75aa6879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620f04e87ad1df634f77641bb527f6e6e2002e99dbdac7976c4a56af56a3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofalifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87a7b0a0c706a910925fd2cc80367422fa6d946dba62248254ed3006c9b9353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gssi01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f477bf5e6d149d056250e8264e6570620018317a74d457acea12aec94224e921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afhbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dac29e60f3feff5b441d4c7205f30e1259bf589dfe2a46e9407a77653317a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumajubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e5357160c9092380ba999f7b03d7eda749af33a7f65e37de54f79e3952bbea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhiugbabanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc84f3a3c4176e72df45ecbce6767fcb215481cf688f9a411b2e5e1a9565e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac7e41673d397a064bd48843880d5504ef620c41d802d987d633772b90cbd7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycuruban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05e8e6de9f9f146b9aa93408a90a1c8d44e748d7b82561d911d75fd99c71589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...