MAL-2025-190145 Malicious code in version-sass-loader-webpack-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245ef4ee7065bdec8a11c9aee3fc8b289af5ac01fda869072a7d09d22217380b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190121 Malicious code in user-benchmark-omega-benchmark-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695b5fa53b0ff23c05d1405285ee407040eee45a0bfb4eb1018bc5bc7f8652b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189804 Malicious code in taphonomy-commitlint-kardashevscale-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695ffb95ebfbe4a2099875c019ec792a3a780ee83517b91b3a5b79d3f44c0036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-phenomic-odin-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24f316c2017efbe3858a178ba430fa5b15695ba388d42bc7350613d60c043be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gammarayburst-venus-tectonophysics-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4109786a6043bf4c8d88fb2455c72847a0962f9e4f4dd5b8e4ccf91dd9984405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hash-uglify-cluster-info-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a3a53ec24253c6ab5d1ed24fd3cb74c1c53f7311dc887ff7434622f50ad233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188765 Malicious code in polaris-parcel-ora-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a6e796dc58fc1cd8ce228f6a9f7265536d1cd77c4ce0a8d3d2704dc4e4ac18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185947 Malicious code in bunyan-pegasus-primatology-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f004c3e5083dc69b6b3d2d97f90a416603cf0b7c30f549b404f4f661464ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sun-thread-monitor-void-sun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047adcabcc874fbcf09307af5ef5c1dacf009d157f5e7e349936d9bae83a1fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-grus-readable-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7f6afeae699f004a49669c40ec942ea5468412b503aebc4ef6a6dd68995578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-deimos-superagent-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d98d6bdee6ef3106d12f87df57e1e2b9c3528bfbddfd348a03903227af37f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186108 Malicious code in changelog-borealis-resolvers-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b416fdfbee04efb784faadebdebb2f83d584927c66aae9b5f0c1ccc972efd83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190144 Malicious code in version-pyxis-spawn-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7caa9461ef60c5ea68137682e034dd31e821e161089f2d21e63422f8d9889d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xi-moon-star-fire-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362014d5ddaa5609b560cef0f3912766ea90c9f16f84a1fd7f3d1750deb77951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-electron-nebula-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e3af3d47e9940bbcfdc5b9bcad2402c0f51883d757f2146466144665b36d363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190466 Malicious code in zephyr-local-hexo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8cbc43bd2e8f930b64bd3a7bef8e5d6d3354d3de596f4ba9862789de5ea934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186380 Malicious code in cross-env-cybernetics-juno-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e927b05908edd9f55a265b28a707a8243c20578740178fe8e88c376112d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189907 Malicious code in tethys-schema-proteomics-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc52405d182abcbe70ebca1e32782e8c4b840ff6509fd47793c70c9d97a8b05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviavue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74b72625ad407537cd907331a3467804c15158d037d09cab9278ceebf2cf3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-oli-abar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb3efddba964eea0aba376037d810fca8618592af3f6575874793d7a74016e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...