MAL-2025-189665 Malicious code in steganography-aether-on-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a82bcf9484d0efd576c49a8f70274e7b0f9d424b9ac8f7f2c024d1aa3911a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188592 Malicious code in pegasus-cache-passport-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfec8b52297551b8c72f8706ea4a3412254e3aef5804f3ecfcd835d4237b6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-csrf-sagitta-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4a0d0f7ff3dd984df6f9575fd59892f7044b99a492bdad2834ae0362abd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189043 Malicious code in quick-decode-transpile-array-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789be1eb5319667c7103faae653520c2ac40f78ca9957e497f34f7395845b3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-thermochronology-parallax-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edfdd0642d9a4048a8b1734c5efe86d4bab6e2ec788036da89cafd83cb23f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exoplanet-xerxes-interstellarmedium-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6b83f3bf5aa13c5c240a68822042cd334b7ab9ca7607f5c0562f4b8966fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sun-cold-upsilon-deploy-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e3fce7be21fdbff197cb712d6763d9e3425bc78c5e5602348c426d97f31711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186452 Malicious code in cypress-vuetify-mutation-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0bdf630701339c3b4e0b026be7375225105671dd37c1d58e92ce6dcd04269a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in omega-string-view-double-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da844f5894c542a0d1cf7cd454e4368a4f85e5c9fcf2b60c0a06e16e1a40fa0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-rest-fetch-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ca6bd38ffe7f61ed5f1440b7c2a5f5480e04e3166d0a85a07fe4c3b24af40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graviton-module-stratigraphy-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284cd425aae5265639cff05fca5137193ecd4c565a2c96c23cffe44143931462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189836 Malicious code in technocracy-protoplanetarydisk-xanthus-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500dd7d62fdae022c87c95e3d1696430225ac3b8b2ce7eb189361de65a02fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fugugaiagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4094a2ddcab59fffd34fc915230883c27a726128e85dafc073c4b5fac7d9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaguagufafafci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5db91b7310b0310f4b4f7cd857a50a8a8cfac918b3c1639a96b0217748c7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87745aaac0357ce2091df305d10cd849015782459c4c10a20face3f7bf597d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucauffuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef51ba00f974ac0d8115382018c58cee9840093790a14a878d4b1d9a8b3ae9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduhihsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9d4423450d9581599e3d302c80b2e9fb1dfd097fbd62dcdfe93d0bc52a47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9212739f7d65e80f6ced398b648ab78ea7f437ee6fac76e602ef524c71ea01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gggbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32111508e1795c7bad7c21bb710c7161d7d5e07291af62984555c76bb4c8b75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4873e40335be43d5be1df2e191cf793cb9075fa4aab7fb0c5b3119d71c63f7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...