MAL-2025-189159 Malicious code in relay-xanadu-playwright-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b343566d9c2b440cb6c55468fbad158ae781470ddb8529d7f26d72f7a9e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186703 Malicious code in electron-pm2-toml-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39fb8a9d75395b1785a187dc32fd7123d42ea214d0d3cd4f9526ff421b0a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186894 Malicious code in exec-zephyr-xo-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a537378001b9bae4498bb04fea101778d1e52997d9ef0b70e87f31e71d3122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185968 Malicious code in cache-publish-decoherence-astroinformatics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8c45af9f1f787eae1ffc6a38584c3e59ad89115ffe14aaaa705a8994e0708e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187411 Malicious code in hyperion-hermes-version-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15cf735cb22bc6f6c69e8c0af04d9a49053ea95e2438caf22b90dd1226fbc2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185553 Malicious code in areology-darkmatter-ablation-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfc4db01117ee624ad9404c0333c608488382abb48fbb690352e94c3f4e111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188102 Malicious code in module-phoebe-elara-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaed4d6cd51cce3751cac67771452d77bdb298f1addc82ad8820b92bceba07b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189368 Malicious code in scale-deploy-pi-simulate-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fa017a28d30b614ee50a0a757c91fb23576c9b1ed146e6df71f8e508078a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188006 Malicious code in metalsmith-eslint-plugin-proxima-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a089256b968987b9ce2f7f33576c538fe8a9fb310484093972dafcc4d21ec29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186674 Malicious code in easy-pipe-signal-proxy-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cced811f8b7d7d11ae1da05db78dd95c88ffed00ef920a419f7b559ae4c66c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188019 Malicious code in meteor-cosmochemistry-parsec-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018f42ff841a03bfe473a2be5b8a5c9547a9ff5fd7162c174cc4bf249906c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186093 Malicious code in chakra-ui-test-quark-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7da34d62a5c8298da9cb0398d30b6ec22a9f5f88682ffbbef975d1fdeff375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189601 Malicious code in spawn-venus-hydra-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66e971fd14bdefb13ffa29893acb4ce63a7232109a3f4246fc26be70ddc6ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa67e9c883ea8ccc10647d7f1646351355c60c68f495ea18e1894ac93703e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5240da5c0ad994a4d5c2555e6dcf9436b59f9b4c2a876b28abbb4a305304dbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afudsac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea9d91341279465c66cd433abe5469713e1f3682b303c987158eee909cbe9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfavfehxafeabfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581da1f5c7a82897e8b6909326a0e405918f978d0638ac2caa84de710100997c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagfah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b6f511e3b558edb49194df62b9279407f3d8ddf440ef7626265cd5eb89027f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobabsvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054d6849ef0d6973da1d7421700ce87d5d14ec6e9eb83c55a4efd9f472c0b701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7f352cbfa6b238479696887407ef04f03d8cc88f4e355c2b7b925d6e62626b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...