MAL-2025-190247 Malicious code in wavefunction-crust-interstellarmedium-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a6fbe9eb989b7506f8400b8bd89e2de56b6b7b55bbda804bf9120b204df0e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187459 Malicious code in indus-neptune-typeorm-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5516309892382b3fb0fe6dd7dffb02a9504ac82c70a818e30c46579076ffb483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in speleology-ganymede-halley-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a4e204a906cdfd8a5558d263c05149b2236580f35ac76afc37f33536655421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in runtime-promise-assert-async-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc1992c047a8d0c1a09bf957a23e5dcf557eeb8778a576e311694f9098eac19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189463 Malicious code in server-nebula-cosmiconfig-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d990e48bbacd130f5620b5b20983fbbc4001f0ff552a7c6e169141a13af346c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188623 Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c5718608669665e65c60caa8f7ae2f05eb9038c1b2a0540f96b584f1ea4dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186275 Malicious code in config-darkenergy-heliophysics-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3f2a08be0835c663a99803c2a7fa6298b462438acf40f200e42fac09cc218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187393 Malicious code in husky-eridanus-quasar-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e89051fac6b87ecbec90f9d80c101f8f3a1d9fe8faf531046b922f215b64a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187690 Malicious code in kinetic-iota-lint-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c31c4d01babb265d54196beb69e8d0c534671f97f10feb2b96ba2106a7919c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-ssfres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29dae9d62376035746c8b57804f56d26d5626ec2c4ceb05cfd29da01ec89af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcadgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541cb764e24880fee7bbd1465dff38717ca640fb7b6010f4e86dfe4490b008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b4f3b9e3ceee00446b5c107c09d95da19afd580ecfd4e464e956f7e44ceb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8664034e3f130fe849ebca9d987778f514cdca4ba5cc926389d022b5dc50db64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabualiukaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c59915842e89ad6c5295fa13281e768d940b52dd89d2660e46ab8e013aec7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0bu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 353a316dc441980c5569c15932f734a7ccbb111dd36fdf145cf734efb79545ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5256a5322b5e3351d7ed99ec2107bee69d5e815b9331672518e405f4747f0537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-viguvfuagudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc54852893fbab3d935ac8923d01bb52877f963df369eb5934afdfe3e0539fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labiomza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863a596a92d156102199ba8efbd2742f65369b1905278e28f1be58965c0d3f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nolyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffabe88ea853e27dd95137e27b673a8b05c774186e95205381c63621621c65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-favr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7858c82682c285822b8bd8fea2bc14400481b3d649ff1853cbc2ed6d31befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...