MAL-2025-185413 Malicious code in airbnb-titan-pavo-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1598783b15eca6936335df4a84a0344e4d4d3e714804992c93e368d3a8cf3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188029 Malicious code in meteor-octans-grunt-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6453ada94af1f9b899d8eb2790c3bceede6d346d92601996f8f8fc7cdd7ccc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185417 Malicious code in aldebaran-markdownlint-phoebe-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2eae2d4d24b716dcf27519ab4ec2afb1dff648a431341b81fc253327556c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187837 Malicious code in local-farout-transform-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a1fc589c9e69dcd54aa44a6a36b0916df594fab1f9c3f35a75006d3629ab66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186818 Malicious code in eris-postgres-taurus-metabolomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa737fc1e071f4c754c680f6353ec4cdd65d7e7162df98b7885c18bd7563f2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-lint-helmet-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5a4b6d4af71eeb4c819c5aeed09820f02c8309f1b35be0b403965813dd281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-babel-postgres-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393b5965a6937405c9e5c9fcbd04f7ceb4037d5f924bc82461abf50350ff323d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-slides-koa-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d901b770938de6417077db7f0e64048574068406c7bf11efcce84fe61d1993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-release-it-stream-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa57807101bbccb1ed65d8bbde73a1aec0b5c86283b35a5d44a29439362fb73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-supercluster-superposition-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd0f296964ee5e1b57fefbbe530b24988b598dea0bc5f6477df3d3f09c666a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-scorpius-dotenv-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a54165db7da361334553c966eb5152e75555cd344fc44c637a633e938c7a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primatology-algol-postgres-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013c6424d179894374a2287438b3d3e54683c76bd6bcfc312e41d2c1f7459f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-coronalmassejection-vulcan-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b0eacc9625153c6f8ea0ce91170fe0a92cca5c46d7b2b5a14cded70fe59094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189147 Malicious code in reject-book-catch-module-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8b14b5a95ce44e95fff509182c83b828055877000a05d9e7b4447abe77c430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in web-yaml-analyze-finally-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2808c21bacd5df0f6089eb0eddf3fb650035c91714558ba396f5e216b8d51a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189260 Malicious code in rocket-graviton-aurora-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 312704295e91a4e60e1f83792dc3966d9e28d04e1dde7d2905badea7db81b53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188502 Malicious code in paleobotany-perseus-draco-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e95a9252255738e39fa00227391b21d62088949c92c1eaa51e5d55ca244ad53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in string-beta-benchmark-scale-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3882c058c785bd049ed13423d9d06d22f92666c8d8425b6b99e0150daa0b099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-webpack-resolvers-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519bb775afa2ac55d09d1ecd03eec028d7f3fc5ea48838bb4f7d6dfd59bc9e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186484 Malicious code in darkenergy-style-loader-style-loader-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63bf79b92c5f6a95a6dce7dc164aa540cba55e4dccae81f7f45965620fdf7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...