MAL-2025-185679 Malicious code in authorize-route-signal-grid-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6420ec20f08fe9014278da249056c739b4f40d5559cc32d48f639433ed2f1ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185439 Malicious code in alphard-fetch-electron-builder-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9630f529c3a2decf0296dc89c233694d4d75a41419bdca5403cc0224582f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188650 Malicious code in phenomic-avior-greatfilter-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b201e815b3fed6dff5cf2c8c8dd8e975795b4c086f7ae845825da2bd13da55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185589 Malicious code in astrobiology-brane-cosmicsilence-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b6b4fd8ed016d865ecd9f0470d10e9a4a33aa1bea3e56dab915fe159f08a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189111 Malicious code in redis-parsec-fomalhaut-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6b63091fe63c9c115a258761d34a460d26b24a7a9618ffb80e210f5fa78f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185595 Malicious code in astrochemistry-ionosphere-gravitationalwave-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2119ba76eecde671765855d9947d057698ac00abf631f90c033888f31387b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188740 Malicious code in planetology-virgo-archaeometry-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a306eb5c4f40ca9eed5e5358af762509f337a8152ea0a8021b334ad4454ef58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188750 Malicious code in plutology-async-firebase-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2667b86e0f97fb1eedd19856990d65bd90d58cdef8d25af11e31617b84d717d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188007 Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd371531b6504d7302f781d1d49aa918cc42e03fda931b017ec70b39844a114a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoerocneaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c12c77bac121ba3baefc3b6afb0156c5fde7ebf98e78910c6d8b80bcc26cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb0d66cbb2c695b3d0c0a0dd4383ce96503cdcf8473262d9ce478efab9bc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d41b3d5644fab1ba36b595de637b58d7f2682208565b51a106deb961937b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hujikakiabalbum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc35b04674fb8c617313394ce9a9f857cd279e096fbb8c247deabae6fc5f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kiufni-ufavcseqinsdxaodataycptaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06819724c0243b90bbfdb0bab7c496fc9c8ef41602d9dc043b801825ddb25baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nuu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbba432e2d02bb240a2d15b9075a64b30dce2311d569dfec391070baa1715a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-timeseyaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a6308c15f251413654e01436e64a72a9ddeec67a68e276fe0cca2ac5c8aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789cac937e076f677b7735a8dc6fda5315492e94308cce9e77158faf65efdc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-diugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c571bc04a0c0fed293083853cd0df569946c384eedfc87a36c49210495c0664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakniaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd1f92f351f06aea66b75523850695d96d107fb7c6391c61324e23625ef997a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibamayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4a5e1cc8e53f27b4ee50de4c015afe45193fc5a85b89d56957b4b15eb81322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...