MAL-2025-189382 Malicious code in scorpius-vulcan-postcss-loader-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31aafe3c03afb0cf93ac268b63551892f5e8e9ea5895715091958bea3218dc80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187036 Malicious code in fornax-postgres-phoenix-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5695ca34ea3d53ba924b7cf3957ca4a9b7c9f3c79a463ba9e5cf2c27dba36ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186031 Malicious code in cat-meta-stack-minify-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80dec973455eae025b75ae4a2fb66d3f693521c903c9ca3af246808867e0af65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185825 Malicious code in biomimicry-epimetheus-thermochronology-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a733f84c79b674b30688c847aad3e08c44cf8b40e3bdfa208d9b8983164bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187710 Malicious code in kuiperbelt-nova-parsec-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5005685248afcbff87afc6c58f65d21755259f517acd39c3c946f53539dcf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185617 Malicious code in async-encrypt-void-user-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a36e99ef3a68fdfbc6ab3992a4fba166028b2c2f3e8f022aaa922e249f7eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189714 Malicious code in subduction-xenobiology-websockets-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d162d50d84dbe43de8e35e175e07f1bac8050e4acec2b8489426a438367ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187012 Malicious code in forever-iota-callback-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f60f3a13bf834da1f6e7ea40da360ca3b541224c8dd928490733f69f44b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186437 Malicious code in cybernetics-duplex-oscillation-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d5b9d148c937598d8f3ef6c189007a02e9549d690b0c4c30e23d467c599073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186707 Malicious code in elektra-bellatrix-neutronstar-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4f90b5692e853c91bc5bf63fb6ee8aca89c7b606140be3793dc608467693e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188124 Malicious code in morgan-magellan-public-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a4010d8bb1de8e155f1dfe6a934c3701b7769ede92845ac847a3ee42879e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187292 Malicious code in hawkingradiation-flare-hydrogeology-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6711499c3b50b9dadad3bd102d577f6ea2d023d26006d020d36b03b830898417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-nuxtjs-babel-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8611eb2223c19e3229ffc9e93992299b19a837631cc58ec018759f33681b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696e404c1daf42ca7ea9195cf0636ecd76c5da3043dabba1fc7558e1e4965a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa67e9c883ea8ccc10647d7f1646351355c60c68f495ea18e1894ac93703e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c53a1a9ca9169b38fbc0e3e0a1b8f201c786a7644895e9c2f35cb2f0689fbe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaeav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1dd553d96a41279e5731f6652ea10a2237a2cc9f72ea1b0964df07ceb3b619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihoan-afmcaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4ea60d1f24604f9b4b0e7279740dda50741e15893139803cd4028b3ed27f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugjij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5c3cc014959b901783595f884d96e910548173231e8260ef585977d34aca89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-damifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4301501dff2d7b2c475494d391970a0a11802f200ac2462b371cd44e056ff18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...