MAL-2025-188286 Malicious code in nightwatch-interferometry-meteor-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6c3541ea78c2ecfb39f3479845e5c39a51d9f757b6e133b00bfbbf73772c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188078 Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185971 Malicious code in cache-xenos-regulus-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ec47ff40e5433cc495d8db04882a9a62cd1feb321a80da2c7c82326de4718a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186577 Malicious code in development-mineralogy-vortex-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a343064ea699049ea90be523317519eb296be20c57d7a4c231a935972f238d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188693 Malicious code in pi-authenticate-cold-encrypt-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ac2ec191304f45d1b827faa2c4ebc3b52fd5f3ba53ea48a1c5a28dafeae6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189907 Malicious code in tethys-schema-proteomics-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc52405d182abcbe70ebca1e32782e8c4b840ff6509fd47793c70c9d97a8b05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188289 Malicious code in nightwatch-loopback-delphinus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd51a45b3ad13b8d4799d005c23c7a3c15863d564a5a40eeff8179e9414fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186626 Malicious code in dotenv-safe-sedimentology-wolf-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7735c92427f6151353c4da7ddb0c7da56e021f0ab2b4758b33e8044419c473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188839 Malicious code in procyon-andromeda-configstore-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785e4e375fc95922d8389ed7d245344faafc074033303af2c8e26d46a8b78313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186137 Malicious code in chi-mu-socket-cold-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c962890667949b1dda36ebe56787555eacad6d8b589542c2a0f944f45c3d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187583 Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0793378417a72050f4ae70f826a2da21befcf17f43ea0e8d0157e0268e5eedfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186083 Malicious code in chai-prompts-auth0-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad324c4ea61642de7103f9b9dd8dbcd82c0039694bf830c253f7ff3fe81db1ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba4af3582761663277689312c3073408897767d94b09a2faede41d8fb8cb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-ayg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d20724b71a135e1c215834a57d8a36c2e2fc76ebcb2c00098caef513567774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f03d3a93ae2c598885dd37363241a88a780dd0b7a3bcf86bdcd9b364bbdc74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadavguhafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db53e4ad93799bb5d9d332f11ecf2c451be9d2f7d5cd872c2f99b4d1886cd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c408080cea73fda8116bf0115e6b3c5e4b19384e51c4a86f6f0cc364e605d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bidla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fedb263b734f8b2877105ee7ffb92831f9f33f4aca19247311b334584d96e736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugooii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30fac49223f8d78ced22a317ab773bb7938d76324cf9a59bfdf24d0ed28903bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248eed230e4efc313942713dd46334818cd9837d4ed782c4be3bdd5dc1694b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...