MAL-2025-189902 Malicious code in testcafe-titan-fornax-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ab67a6297012e58bbbca384b01496596446cd811f997a2a86a2baf414a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187092 Malicious code in gamma-integer-hash-double-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68843289b91c66d58ea6949f006e97f32e4b097feb47c1b22cf3d57e75c7050a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188416 Malicious code in omicron-bundle-file-final-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cd56b17c0b82597e1e036cd7fb05112f6c2cf312bf53a0bcad543dfd985bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187927 Malicious code in markdown-multiverse-vuepress-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4389cbd599d8b51ef8b9f455d0dff2181aa051854625dd0c231e3d4c364cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186845 Malicious code in eslint-plugin-husky-pavo-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e746ee6f0fa370fc7f0fb5e7e4e47d2df2a52bc77ffee749e24d95a1f10b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185494 Malicious code in apex-titan-babel-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01730205c12d694b2acae4ea9b3af03584b9f34e2f92fab62e45846ac5136fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190310 Malicious code in wezen-centauri-mutation-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4e1e5665d252d712f416cc304c4428c53b4bc67721b4f9f7c5a6f4ea43fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186319 Malicious code in cors-standard-epimetheus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a0e58885cbe1280ac15b1de772db340d444deeaad728af9524fe0139441eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189049 Malicious code in quito-cryovolcano-nightwatch-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a24e9acd11ed85f87985112d1bd7cc1e77631e7593134f4b3a95d72977e303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190190 Malicious code in vuepress-centauri-transhumanism-astrobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdb05993db85d17c64f179ee15f5d3d4425016c0f6dd71699c1b011dd854db6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188747 Malicious code in playwright-wormhole-phylogenetics-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998a8014614f0315a660ed56446d83ec0dcb914bcbf25832b2ba07ba5e3b4ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafuyfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923f22842c56787224a76dd5e83469d88490e6b22106b6d05d232027af7f0290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb536bcc403edd62b5ed41edb6ddaf7f65235823652f9bd4bfa97b15a039f93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokaasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c623cd4053aed39ad814e474df6f15755e279f28b88ea2841f08f1cbb88d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72961222466a1fed7649e3d873db50ebd763959952762e8f564c9c1293d06773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184352 Malicious code in modiov-kihan-afibanaihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9666e7817b22e999c75fd14cee12ff6a6db574b0e461fbce5ae8a2f181a2a817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183903 Malicious code in masv-ilo-cvaginnavuvhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8edd46877154f91f5766c78f9252491faf027c0b0912ea44e2fc518fb1baf80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-srtrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f872e197eecde6b663d8ebb54944c8340688b215a2842af02d926cecda5df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgahfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73f8891f6d355d950c0ad110cd60617e7e8fbd7f0c60e489c0bbacc2eefea64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbea887ffa500e33cf0f11a4bffad3485306217c6eaf49d2c9de357ce74c2690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...