MAL-2025-187657 Malicious code in kappa-eta-theta-sandbox-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274495a6c05031146e800213ab1b1e42dc632a5fe4124ecf87ff927338127a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187144 Malicious code in gemini-sagitta-cordelia-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8d2311414e1b1acf4dd1d565d5665bcd08dfdcacfc575f768244f7c9c7ca75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186172 Malicious code in cloud-class-stack-xml-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233273838b0bc9fcd5abb46cd15a57798f84aacac1be400324b3c6b7173ae244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188188 Malicious code in nconf-aurora-ionosphere-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d618fe2bbc27849bdb3b7ab0735de3ede48bd7a4f02e7614ea1745ea65ea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188768 Malicious code in polaris-solarnebula-equinox-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a261fd070997dabf0e260145bdf3863f5c5582929fc045bc5e59305fde4782d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189543 Malicious code in slow-data-moon-object-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c49854e181d4118e50a6f9910fd6b567e67cd382a7ff14982b0a228063d3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185848 Malicious code in blazar-markdown-umbriel-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5715307270d9f6747af2bfba7d787b5b5cbc5c54df42ae3ac425223d35fba0ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187790 Malicious code in link-cron-simulate-assert-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e256837491141edc7c92e5b82e6fc342f0f94ba27253023fe34abb8a251812cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189583 Malicious code in solarnebula-betelgeuse-mui-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8de60c105978945920dc38697ecb14795c8f5a537a62627e59ecee7595ac8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187463 Malicious code in inflation-antd-dependencies-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc48f01a9a0590b795023a54e9c8d0d2e398f6a53275586aed013f9c52e6719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189672 Malicious code in stop-cressida-prompts-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb962d5b873cf65209cbbdd3c78b29f2fa140fe48dc0cefcdabd5d10426b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187405 Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d514e86e9a193b5e01631ae67c92d3d0e92c33b1e9cb062f76dee9edaf4a7576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycurptvmaduban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ec866ee2460c7f8f4e1af899b9ebd5fc327b2176f0ba071110c415172ffdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-notsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f409f7896799d8807cf3f4bea8f8c60e79e0d194ea5a6055f8aa1856b67facab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-ugafuafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533222ae155081c40bdd78be6e0b6c9adec0532261b333b9af4bff9fafbf7a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-igh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7588c29a96a29012e5b08f9d2339a7078f56536c136f77f6fc29c859296ff4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc53fb2fceaedc62007a2ed69f01d766dd5aeb102ab8bf91ca84f15cb40ec46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ace3cc772604f83dbbf111fb45dceaa972811b7830195765e021db8cb1aaec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a69a4bbffdd5887ba869d2740afeb9844515509a5bd4211ff2e84643332729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d98b9fbd72407d15b9f8e8b489150dcb48696ac9494d0859a00cde525033dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...