MAL-2025-186372 Malicious code in cressida-yakutsk-zephyr-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae255b919a558810665528345442d46e7043d63ffb0951981037e0bc8c961d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188620 Malicious code in perseus-carina-duplex-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82db29da799b8923adf9e0105b02d015268632fba539c6d56c55e7300b952ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187266 Malicious code in halley-eigenstate-baryon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6305f8cb03ad275db307d48635591f959125243697c79edc5eba8a7fb0ab3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185860 Malicious code in blitz-nuxtjs-cosmicray-paleoceanography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4cd9862b70a1a45035e499259dbaaddd1fe11073d087794c76495eca9f7215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188886 Malicious code in protected-reject-decrypt-bad-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfcdebe8a06399cba0d551e3325ec3887aa38ca3c9716354f910f7f99bd5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187767 Malicious code in levels-event-bionics-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bdee777e410b3fc1869f19ba81326e968afb704dace7f49fb14bc7f0397e233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188094 Malicious code in mock-string-simple-final-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38d5a29590fbb31cc80dde1e3ad6cfd08ab4787dfdf5aef7c978472bb42c5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187236 Malicious code in gridsome-planckscale-primatology-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7518cedd7951dca7e3b0b962acac9863b47e470220a639cb5aeef37ddee442fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185377 Malicious code in accretion-avior-radiometric-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3811d7127ab0f5c5a2b3ec85970082d7d64f2cf6385ed38227ee4a60dbb9819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186343 Malicious code in cosmicweb-miranda-xerxes-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689b4bd5f9f10e90e5f9194bbc308daef426c25ab1ef6f1682b3006735701711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-redis-dendrochronology-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d86fe46479392a59ae1b6014000b1675286c6ae85a50c9f04470b1d5626df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-thermosphere-native-cosmochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08733e15229a1239113f215e451e962f1636c3a17c93fe577a05f7db2482bfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-procyon-nextjs-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e02623bc5d8858a0fa2b9d6b055451f4e014ae45fe30ff2456826691658198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-react-bootstrap-heliophysics-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68274b408b6fb2382a5f5a2aa275eed20c2fe6bf4f3a8f6a33645d810c97545f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cat-compile-analyze-deploy-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9514ab2e174c3c41eef9112756070b30355f2acf2e0db624c254b0fbd779b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-dynamo-supervisor-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b41f5a989473e5be9b2bc5751e31d7d24fad060b49d6606c000ce2dc8d72f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genomics-biohacking-xanadu-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db31ffe47d54cdaa5a7c3fc25c8f9613c3d1667e57a7e9a8b85bfbccb19d791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-yonder-hadron-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c77c14b2284f212027404562df746812937dd230c0e6f51634f32df0c533d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augmentedreality-fetch-gravity-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d088457581e114c96306e6650f3f92d9e217ab0cfd12d8df0a74cae837196d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...