Malicious code in phenomic-google-antares-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fff97e545d5e2e9db5b557728fa65896b848a234061eb2b80fabc1f5a3203d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189410 Malicious code in sedna-enif-fusion-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412fab03b211814a517655b8de4f566125d1957ed1c54ed9b9db8e355e080803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182050 Malicious code in flights-lutuiog-aloinalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f1205e59dc44f36ddb82dc35382403d48ceb7c77ba6ed18626576e0ca12a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180267 Malicious code in teate-thy-sonic-cujmov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1287c0bc4b37df04a2a6d1b45d45dd50d4299c70a0808420be13c4303a8b5e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a991f1e51d7d1016d81ae1d45ab4a0ce6b117afef8f48e1300a1e6a2af81bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-trtean-teas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c463be22b72880fe861b522106c736f551350588d059f946e634921ece45c78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-minas-minas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892862a7f860b8926ac40aed28bdab4ca6c1090bdc2fc6a3dd16a87eb834e458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88086ccdaccc1bfd0c363c7a487bbaeb16438174ce5c294e475caf062fe2b28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163543 Malicious code in nokire-zabuza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adad3fa2f33a028abc3181d7e92af7eb512235251ae33debc624453ad6d3de5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153525 Malicious code in avomainah-fragoias-ofatafyfau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9527ba4bdf034a323ddfb00c51f08bdb5e1494ab82777ff4d152e811775a4f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151690 Malicious code in aciaiaggu-idaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43287bf81090da3cdc6fd52a3f7bb5bd863709d846538ab2ae75a71b979a124b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e93ecb06168674c9a6870bfca6f1987a82baf7f8b240bdfeca0263a74c17eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157720 Malicious code in kuinsu-lki-kopnaimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eae449867af55476892dee589e2a88e8ea26b6ba02622e9694e2e298c1e5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161373 Malicious code in nabuf-oguuof-dusagof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b9c2f4306d5346499d7df19e4570d7547f677a228817c198ea72d5b1425fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6e8b32d41601ae5fd178ab62861d31cb83a9aeb67328cebb3782e01b4d7b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-daj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51dfcdb28cfff99c41a92f2a55682729cb6c9599eb76aaf8727e3ef1b6d88545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150477 Malicious code in @miptaa02/adahfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874e315be2cb8bb04dcb743e2890cc3c8a10df79795ab5a1e2907dc8afaea4af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144668 Malicious code in magellan-testcafe-jest-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3276d8f4b2f01340c5b8606f4b0a0722893d000c715fa38528e4c621543d9f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-achernar-rollup-plugin-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f907ad22b995a89067b2fbf245e4ae84280f4e6ead516ca728f2317db3b178d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134186 Malicious code in honest_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a4010eacbef8eb668191418d49c2fd16be2e5517b9a98ef631baab4b9a8eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...