MAL-2025-189560 Malicious code in soap-weywot-robotics-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0dd944d0f7180206b81a90a1e92b2a37af02b64eb858ac325abe0b694b3bb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-materialize-link-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd6558b44eec2954b20bb99ebb1a7e8e455149631179d6949c5569bd11e1822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-castor-supervisor-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 193b52bbac9dd8c437627cdd8702135559f279b67db8494364cbc1d7a07bfec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-sanitize-resolve-omega-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcceef72f7076040ad3f53d861981ebd1e83dc7bf7e6c4bbd7c584c0c40e5a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-carina-duplex-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82db29da799b8923adf9e0105b02d015268632fba539c6d56c55e7300b952ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-comet-adonis-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba309579742e145eec67128cd1726f352994bbc24340da2452433bad6350725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-cygnus-repository-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd48d72c64c9fe1b6b0f79051ba805240b950b7b00b9f6379eaaa50d6ef54319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-package-bionics-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fd405157c2817e145d01f5a76694010a00124749169424ea157e463f04adb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186643 Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfc47154389db6b336180cea32210fc4d2ad1ab645c023aa1af51c7d31900f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-interpret-cache-final-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9605759b1020adeb5ec89f5a9efb1c8e482a5658943df0515f8cd42b73f4425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189718 Malicious code in sublimation-sadr-magellan-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f76d8e92d8268cdbaddbb529572984b353efa027adb0b91de89e552597f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-nodemon-callback-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215ca53b952a9cf0e27dea22bbc2f071c70f3f2c8738b83de3625f453dec9925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-middleware-mongoose-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0a7212482567b4ff70ad523ee9502116475db634fa180bfd66e4025e91737e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-info-encrypt-boolean-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d7b093a3c4eac924dc700eb11d1fa0c68214e3d89a9a8ef9929438ab50d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189915 Malicious code in theta-daemon-moon-char-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2429c5994ed2876f384fed139f93e19399a8f86b62e50a60c67f7bfabdf39a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186640 Malicious code in draco-hermes-betelgeuse-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3e9fa277eb2731d2e5d6b112e3c7dc4fcd0328ded4825757ce1929bf1fad88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-dynamo-archaeoastronomy-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54da22c800be5c89bf0fdeb32b9a7a594ca11b7090f7e046112643b481591db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190406 Malicious code in xo-indus-procyon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127166ed7ac52806beb38f75aa00eb00ab30d661f9b3ff074fdf4d093831f339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186799 Malicious code in equinox-passport-janus-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f11b68e3638d03fabface74d4eade1bc5f8df93eab7c0a224d47b29af1d9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-transform-nightwatch-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6daac7520c355f3e9987d2acb56170e40385b4c9e7bd696c70bd2584a925b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...