MAL-2025-189524 Malicious code in sirius-spectron-webdriver-mutation-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e68fd5f36e91ed5d055cf305c8aaa3cbad0639e36219d2bc00df0237ff9c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186491 Malicious code in data-node-sanitize-balance-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb8d9703abe39cfefbc8d1d34c0ba97b94086751ef2aac885f5688de093b8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188875 Malicious code in prompts-terser-webpack-plugin-enceladus-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d053da0377a86332b8a332dba7d3417176072d80fee11937868c599ab833365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186513 Malicious code in deimos-ceres-astro-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc2c519d821e0ab1fee4f93357d29d7e5adc440d117d25390326ed450e25002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189582 Malicious code in solarnebula-await-superposition-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c226fdcfc6df863c5408e9a6b8341542e42b7f6a25ff45ded78a44d9f5cfdc22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190228 Malicious code in wasat-betelgeuse-mini-css-extract-plugin-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72c3967bfa61a9dcf238d33c4284ce2f1f41d6b3f850a019d161f7672cf5834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-dalimunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614bd4bffb2dfee60047ea1585dff6b5d5a06f6ece161973e2c686c0f9d45523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dabbamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20051494bc401e9c62a1385967639d2dbda39b84d6071bf615f606f586833cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682475149d29ff69e2252eead8f2bcdc841a158958450ff54c71864c2ede0bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakakioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b2fa74240561838df82a6ea8908387ccf4aa83a85480cecd98db06d2c60182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff714224e7f4e9b3540727c9abb4cb64cba01f5e2945d0c10a7c3cfdab8f3131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4fdc58e4ce62869f04c4d53aafbe66b38b60467bc1251d1fdd8411ad6f74fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1cd789fdf2dce8dc36fcd6469de70278543ad1ade939b1dda4394de69ad720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-oli-abar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb3efddba964eea0aba376037d810fca8618592af3f6575874793d7a74016e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olimos-nolinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a6422b662a8de02cbfbadbb280b43ce57908dcec2d561b1ac30e03050b31d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3df62744d845f27f36c1f2021566483b119f0a95cffc5673b84f7387e01e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6b6a4356a19ce2da7cf7030d9d57f07e1c319711f10616ea43165bdc99e6a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjinhrtew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50dd5b64049515622654e93b3c0122a0a572af7434781cd6c22145149104b134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjinhtew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3fcefd042caf68a4b1112755d2d83608d50b89e71c6e40acac5b261abed63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-vigugdivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2696d5deb232bc776a48e12d708a2f6a079b6cee58ada50ab4c6463612a0faf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...