MAL-2025-185754 Malicious code in baryon-ini-biomimicry-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3513dd31103848bc094a4a190c5ad0a85ff4cb3dc49d6174a5d5e91512ba98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186203 Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0400d978fa965e52d12202d981d0a00f84aed877346a6ddbd17443b12575da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189415 Malicious code in sedna-nova-readable-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519472d81a3bae325559686848d27604cacef6d3088adabf65c3453988faa0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189882 Malicious code in test-fork-gravity-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd155e14b0f3d8707048a509a44689422afdacf2b452915a05a5894bcc2dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186494 Malicious code in debug-cache-report-cache-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548a5857bd7c92380811c367a8bd3c184e43d7536080c389e556fed63330059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188402 Malicious code in odin-start-sagitta-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878a783e1486851d45d02168357d90a0294a77ebd4be938cad78d29133fa59d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185965 Malicious code in cache-meta-root-try-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e240ecaa5180d2c3bb0773d383b7d3624ca22e35d3c052302961ef5c975b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188749 Malicious code in plutology-ariel-subscription-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7586875995a9248c1bb0d69061389e43a86bfb28b5f8a11e6aef21281d3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185546 Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c059255ede275e21e5d68337bb9005b3814fb3f5f7d935ee2d55255bd2a1a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-aufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1977e69d97b88c5beb3f89fc181ce83abba5f00344ac4d2db755ccdfa049bb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-systrt4tf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c4357db147e0cf23d40e4e42e112fadb8c41b0528c23a5df30915ad082c80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c818be5d8a9f0ab002ed67eb41e9de2d8fc7c57f345151ecb9f9684a234bbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167ba2603e47d42800c574076f405bc601a59b7377615b051a0c3f4169af99fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-timexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75de2b7f8dd962910f449e5918ba9947f6d7e8c42fcb1ba9b3e0f00593c276a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7600c7ee51ab986eb8d25bb13260f147dafbb482f6052a8c7e085917ad0ee24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-iualimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88692e171857339dc93c86bd79216800d890c399560256a46c148e55ea8b89d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nolyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffabe88ea853e27dd95137e27b673a8b05c774186e95205381c63621621c65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8709e2ac0b6d800feb0b77efe6c09b1fc13adf2c83ad9a3faa4534e5458c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaivuavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45a630b9711d98580e03bd3f2471fdbbe0c2077000fc75d466f4b40680bc4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkusaytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74bbbe2a26043a49e6923ed5378dc6678ad5713aba3ad9a0d527e7198c3b9bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...