MAL-2025-185803 Malicious code in big-monitor-moon-iota-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616c7a209c16dbf7dfd668237b485e9f42ad3b48269110d1b28ac6574c83aa7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188407 Malicious code in old-import-decode-table-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3318615e0691a5ff419704ab106e4bb388891cfde25ae060e932dbbe49b4332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186476 Malicious code in dagda-technocracy-commitlint-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5d983e33879369dd931cad741e8149906dfd91e5b8a8b102b534b4b2cea15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186944 Malicious code in fast-catch-notify-epsilon-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e665e17428eb9a4550981db373ed690badd515c6d5f0d9e0ad505bac2e5adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187185 Malicious code in global-rollup-plugin-lightyear-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc57f45ae1114a1d5982e809872dccf790990097759e1326399fb0c4f9c9805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-uninstall-mongoose-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4389e7f6cba244996efe78ec18203346fe48ed7af508ed9911925bb724a6fdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185492 Malicious code in apex-postgres-procyon-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0aeb02932f948ac72d778e30dc2a45eb788602e06dd414d7abcb985fc34e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189632 Malicious code in spy-sun-byte-debug-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94dcc9df0438390b12a282f8619d7e4c2c062b0442a82501ef29e1bbdbb48902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186960 Malicious code in fetch-ursa-vega-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d636c0752eaa2b5ba9b87b8801329c119b834f1e4a4d5790878fed205c0a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186951 Malicious code in fermion-solis-wezen-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c64341b959ec7e33415d9299b117759d3127f0dc1de6b32f0137c1ad514a098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187230 Malicious code in grep-pi-final-interpret-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5422369c9543fe29291dab0ecd21197d00e62b593a25270abd1b25736f3bec0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185969 Malicious code in cache-simple-awk-sudo-class (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802dd61e2bb009c247c01e639f24d56321322ea9411258462212b63efbbf3525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187749 Malicious code in less-bioinformatics-ganymede-virtualreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1df13485b81ad390a085ef0c658f7e6e2b325d9e8b388407e0aca4b92b451c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188341 Malicious code in norma-public-grus-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d707947704d8dc980f2972ded93615029de1eb73f432f2ddb7854bc91653c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189769 Malicious code in supernova-saturnology-asteroid-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7937459b0c7fbf26e6ce76e53b247007a9cc5cd25f0a634fc670aa4fe393be64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-callback-convict-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4922425b583d08a372e377d0b2ee372ad8912aa2da5902301f4c5ec520af10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in photon-darkenergy-mocha-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ce42babb790cecb786467b5307818ca1b0a573a280616ec3b158591c55da0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-middleware-mongoose-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0a7212482567b4ff70ad523ee9502116475db634fa180bfd66e4025e91737e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-eridanus-upgrade-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9c1477a3588485280f9a465ef1fc8ff66f1091fe204ff4e7c224e91a7c634b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-wind-decode-sigma-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89e6d425ea10a6bbc7c23e11410d5d33053239f7ec72033f36de7f54628073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...