MAL-2025-187232 Malicious code in grid-mu-cloud-signal-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdea576c0cd2686520489649051a2de7c88148b728550acd1d2f5516422c9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reject-static-theta-info-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84dc4b74234abfadc82978e01f9a68d8516ac07a94e6666e93a5703d7fd7682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innercore-biohacking-aether-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4624518d19df6decb94a7fc1c16a63c38a1ad699a14920802872453db27d850f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e15ddb8489db7af6fbf7562f37b8fc6a58192ece39405003e76501af3efbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-iota-mysql-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b745a215730f800ab23e41a575eb14af8482a22bb5b1a6db13350db681a93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185557 Malicious code in ariel-backend-css-loader-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8985f6f4b26a752bfd23a32fbbf39c2aab5c6b48f599eb0f46f6398a6833b115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virtualreality-abiogenesis-passport-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216de1758c390287dbbb13dfbd2b313f02658117cb686365a5d236b6ffd10c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-sed-hash-mu-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e5ff46385a6c398888d0e98adb6298c90d848a3297da7da247fba314dd47ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187953 Malicious code in mdx-hyperion-taurus-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5dab7a7c597d9ff7f83c4f405d6e51f5f69a9246ec69aaf50097b1fb04c2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187453 Malicious code in index-load-rain-gamma-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20949a738fe2df26f0b836a5b31063479b6418c708853c3d50f681b0d06dbc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188227 Malicious code in neptune-slidev-pulsar-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1799733a7d342bee25bf57ffb1e4dd7b9fc468ef2728d5aae7943edc1a9bb58c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saturnology-webdriver-mocha-registry-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5eee96b9423cd54ac4f62a065004d3dac4b3e73c78de4fb77e91972eef1fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186588 Malicious code in dione-transport-astrobiology-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db00f98de7eade5747ea89fd288d9cf3c55ab2e83b1e222f85efd13281d9d297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190204 Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48cd42be9a2a6be3b8e905ae225912535c292dc4b693ff78a5278eacad6bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetar-paleoecology-tectonic-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd63a02ebd57584debf7685bc69f9275d88b6ca02b76d34b92344e2be6c0947a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189567 Malicious code in socket-easy-balance-virtualize-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81d7224dd9cff3d91e76d5be9e28254ebc4cb9d6646e3dd793d3b04ca87e64f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187393 Malicious code in husky-eridanus-quasar-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e89051fac6b87ecbec90f9d80c101f8f3a1d9fe8faf531046b922f215b64a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-pyxis-barnard-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ba7667bb839b545547f830a7cd64064ebb2ed6a65582c2229a5f9a02be6dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186018 Malicious code in castor-andromeda-izar-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027b3780e8cb8f474f542e216188b2492653d88f8d778554b45f05cb0c926bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-library-eslint-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701dc722dbe1c6101fcafac29480e3e419955723110a2d26f7d7314262f4a288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...