MAL-2025-185474 Malicious code in antares-quasarjet-winston-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17b561d80c863f9bd0531b8d955cb3377270c369a97139220b80e1e2a1e9424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188083 Malicious code in miranda-postcss-blitz-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea79ab04fc3a6ac4cbf5514fff31c3ed5fba441933ff5d9a861ea695d6fed4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189907 Malicious code in tethys-schema-proteomics-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc52405d182abcbe70ebca1e32782e8c4b840ff6509fd47793c70c9d97a8b05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190348 Malicious code in xanadu-dotenv-safe-markdownlint-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3910fdac95250d53aecadede785513f9beceed180e4330b90a3808d260b82a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185985 Malicious code in callisto-cors-ini-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee2ae0957732c6cc0510feddf764b20bdbfeee3eb45f1f46839a45c4ac7e2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185854 Malicious code in blaze-transport-eridanus-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132336594566f83353e8d26153b7eaa947954f4e3280dca688c1d21777f60534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185711 Malicious code in axios-algol-wolf-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2bb86b8d75a55a4d1adf14075e237934bca6eea01c1554d121b3e15bda20ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa67e9c883ea8ccc10647d7f1646351355c60c68f495ea18e1894ac93703e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofagiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f800451491780eb3162715cc887022e8288887ff3c9ca5e64ebc87a0682d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyhfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f6ac4ed6fa294b92b53af7f1e0d25b2b9a867da788cef4b7aea6755263f0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cfafcbed9f2bc25156cfcede740dd6b5b88901607a534d1cbd40115b2c8d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahiukuanaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2131b80b3469460ae98f7e29341998810c501bf60a4482ba7a4fb3fb810b5159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijiuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6f5aa01a8209b853bfa6157a8afd81255f79fc7f5bdacf741403ac246f276b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c43b74b75b3f61c0047c51d770d8f228a028e537cb758480d7173be30048b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1792c6032918c71e929242a14ab5423797cc668a94ed27075456676145e9835a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtauzdami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b8a1d4bb08bcde17956f6757df6d7b805c293982eb66f422ded652f71f9409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6af77f4d0bc05ea0b6d22699fd02bde52185de84946c529b80b1bb0fbbcfedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-notar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68306d645661f39fa3b3e4062f33dc46b56d3c9216b59f155231498665cf3731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1a4089fd58ef01c9fbf48e10bd06102b39b8a3e43cef24d740016338d08b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-favr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7858c82682c285822b8bd8fea2bc14400481b3d649ff1853cbc2ed6d31befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...