MAL-2025-186062 Malicious code in centaurus-gammarayburst-rimraf-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46eca5e01dbf97d7b3a851c9769c6eecd9d11efc62d4c66c8504cce9c3395ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/tea_nextgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b314614b2422b372b831db4a94046a33806bc0f9e435c9b993708143cb6069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbitcrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b294d9c2f36a021f0714d3156da1f886082e179cdaa9de5d97e9131806d3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162945 Malicious code in nokire-loklok87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f89617c949b607dbb75038554e2c6137d943188e70f7ccc12449287feb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibia-ufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af59789e184fa2b917780fdd57612135fa8232118fcca625784314c75ade6980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-sroto4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5210e85e852a126a34fa306805b4517292c162734b8b24197caa53dab4e9274b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17ee086e63b3c4ae64936c8f7cc8d0a68f41c7b49ec5af96a8caa6dca4f7a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116370 Malicious code in patria-nasi31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2ad15f25a0690d495ee0aac7b7c5ddf0c44e39a76e1fe82981a3a9b27dadb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102464 Malicious code in fadhil-dradag12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2d9c470d3f14ed4df8fd3805f24234e2c1333c58d750dad661b1be7fb0a2ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97138 Malicious code in uniform_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2050ae1112b1fd2db251fcf97e1f556a0f5ee1c2ef805484687222542fb907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...