MAL-2025-188562 Malicious code in parse-abstract-beta-rain-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e128fa56bacf336a1f2c8600398d70f2ab99bf6fb61db89b40ca95d960d06ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-charon-hercules-lepton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8473c670a25ac2c4782e9d65c46e0a8158a9769fb0bb2733da88072b9a7a2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187875 Malicious code in luminescence-meteor-elara-oortcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4723173953a883601c99304b5c4f785f659720aa6bab31360b538d209ba19485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-mutation-dagda-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2929db64171afec57703302466935401c6763c0dcb88032f7433c14889af5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cat-compile-analyze-deploy-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9514ab2e174c3c41eef9112756070b30355f2acf2e0db624c254b0fbd779b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187256 Malicious code in gulp-rollup-plugin-carina-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bf9fcb09e12feb0d27fb4d36e938ec6bb40361ec9a2ab7c9eafbc28e56ebb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187072 Malicious code in futurology-arcturus-saturnology-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cee2cbdc2bc3dff01e44b79762d6c94d9ca914096274d79ac432f730d252e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188546 Malicious code in panspermia-cygnus-planckscale-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e804c6242f7b5b0ebeb0157d826cc462e43cd2ce0e0345b6236d8e365c313a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188030 Malicious code in meteor-paleoclimatology-firebase-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a821cc361348d4284aa6f017dc34b7f3425d8f343062bed1071a8761fa8318c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188434 Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52340530e8e3adf5630568ae9cf3e1425639cf4410dbbc5f52ee374a406b15ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186357 Malicious code in cosmos-centaurus-charon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2321296a3df70cdf5478b1ec5b12dafad4ea5aceaf7cf64ae37ae46f0cb04c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187146 Malicious code in genomics-lightyear-mesosphere-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1443676fd94c32ffc79df6aede4df75f935ca9d1bc99e7c99bdeb9e440ebdd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvuffacfafv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71d40cee9f68705c513dadc4628a03e4d5270da27e4b106f9a08be23c271140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oids-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c47367793afca5cf0f9a35ca32583c6a4a0be053b983cdb0524d91eb0019a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a47633d82f2b108b80973ac743eeee5eeae20a6f983e0cf0deb8eeaf6a77b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185112 Malicious code in sonic-kuig-tgav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84046b45511f0d3d3887c0d9ab95a755863448488cc49cc9d6ca8356465dc71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183255 Malicious code in kisut-diufg-daoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ec04a5e8aab74924a0441266637ca9e5b807675437eba4d3e1ae74cbb93ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185200 Malicious code in sonic-os-afisigaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5f828fb8cdb811ae8ed2b9e4dc1bf718b7b70d3bf5a29df399152c0f4b8db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184236 Malicious code in modasv-kuu-bof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f717336c22a99c38999ce8a5c43a91d110d1d66bea78388669df09fd52b446a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184130 Malicious code in mlokok-lofeki-akiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c8f0b75fd8406aba790abdd0bde4d70ea1bc37d731d770296be1c552287165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...