MAL-2025-189490 Malicious code in sigma-rain-omicron-emulate-char (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7705bc9df84da3c8cc36282adfda99f92b86bd7e652c6659ad6c302a96fbf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187820 Malicious code in lithosphere-buffer-jwt-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969f5c74780f468d81215b74596c5c5ed356350b8fc25c5ef462e9ee0fe85b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-koa-build-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a36c41fcb310eff78aafc5e8df244c1040a53162533a3e6f7026cd926873e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190112 Malicious code in ursa-neptune-private-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f52b0f332657b30012e36de791eb249b16eb29d11bff1160e4f4b4e5e643cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-postcss-loader-slides-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136d6caff4f79bd4c2162390fa99edba8f8844e4ae965bc0081adee88785b282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-uninstall-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbfee41fefce5715d914720f5044a88f951f4b0361bc31c803542153c084c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-elara-leda-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bba8246c9cb10c6c1adb2dad15906b9bbbf45d2841b4b415083c739160e1e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-io-nightwatch-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e2d1c8c06aa9ace0532a0d3a61dbaeb3cd2e038d997fe0f7dc80a93fd3260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wormhole-gammarayburst-nanotechnology-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6173007b055d80b43e6ee86ba3c832ce5faa5be4113dba6fb9c9438b48c896c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-magnetar-asteroid-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52e755b198c774dd97904304558c2b73ba5f1ae10822199222a1172fa1840d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189484 Malicious code in sigma-awk-abstract-error-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d501bf3234ac1bd75171ea127e1a4bda1473613eb110a0228aa8c4a668c5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186175 Malicious code in cloud-user-static-promise-stub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d787f6189bc96274381f7572cc6423c6e4d61f53808ec5322dafced3748a3f0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in borealis-hermes-bellatrix-geochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabad0ccc360e1c279a67510ebabf3b3e012a1b62e2c156ad51176eddd139646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ablation-semantic-ui-readable-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb999c04b781769ca44990d467de461dd690a88b83be66c974ada6a559b8a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extremophile-slidev-radioastronomy-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caabac9e0f1bd1f9c12cdd709f620e7c1e8d2e0b6ee9f0e3e16f1553227dcede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189408 Malicious code in sedimentology-ablation-meteor-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89630c41cfec74f2f32cc931b82d19ac766f0283bbbd3b649bb05f33e57956b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190150 Malicious code in view-omicron-unix-compress-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d86eb2e159a609113cfc2efc8435ff741a9e4a3d864ae507fe6a729dd0058b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-auth-materialize-ionosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a77a2105b820e7a74ebe25aa5cff24fc525b061fa0dc9bb60d1675efe64168e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185991 Malicious code in callisto-meissa-centaurus-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8c63a0c53777fe89eea8eda0c1a23ede7780098a6b51851bf39db32c4c98f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-juno-virtualreality-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ab08056ce07e4b0fa7e42cc1a807d96b6b0be4eece882b85ff70488bfca3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...