MAL-2025-186697 Malicious code in elara-triton-quasar-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2ebd6f38ab2bc5abd8dd2a5c620057c834fe86a99da5764849ed9c0b4d1e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186868 Malicious code in europa-fork-andromeda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f06c976d398e6600330ef91542a8aa6d3f7aa644912faa1db980b04078a6339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-hermes-ophiuchus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46d3fb402931eff7024c48a03204cb67a6ee59f55d17ca893a2a5d4973ec28a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188441 Malicious code in ophiuchus-europa-charon-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e44526855cca25f3722d9837807468169f2a527c7ca060af49086605dac9d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189879 Malicious code in terser-weywot-typeorm-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84754f42b17c1cbcb703d768e1ec6285f9130fe174ec09e50b1b5838c78f7cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186937 Malicious code in farout-convict-meteor-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fe15b6892ffa91a78075c352e61ed517909a82abb91bdc8793edcb285eb581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189918 Malicious code in thread-compile-parse-decrypt-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7146ef933c1aa178443b1e6366208057596a2447d96deb31dc0f893f501187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c871d46320533cf44f20ca6345eee76fb7ccc7602d3ef75e794d407e5859c1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugkada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8679e666830f5687e451925b474f819c3545093b2204abbbaa8a8bb1d29efc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ufavcseqinsdaodatayctaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2428b2fb97ee8dca26fb9b5ad410538d22ff636e015129a2e20789ddc27118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycurptv-auban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0805781d4528c49381044778068a603eaae9430f88ecdd3368848086ab6660ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimianunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f58b5ff7a371511f4fed1f1a61974aff2a1a7de1949a50315c376178f303010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagiufaggafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f4e7cb7433fc4bebedd7ee268a4a38be896aa3cddaa3507912a0bfe1e77d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmaaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64f126f641a0180e331d4bebc9e2515772d41b468bffca8ed2d099c152b0760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c02ae108d31860db90b1a0afde180c30cf4dab805820670ff7102c739951b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0555f8aff6282b6348aa4592989eb4e4f1c76bb6f7c7e133ac31cbbf6ecd60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-agaiucua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c668b6a758ef89c23dbf0abaf102489794cb2f6b17f43a9823ecc18e1f5aa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490d567b7336db015e52efca7cc070afcfa5c9c464ed428bced9de666e4884e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-garvimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4141331f7de023b02c68cd4dbe105c7379e5ffefac756d5d95cd1786f4740050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...