MAL-2025-188356 Malicious code in nova-quantum-protractor-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b35d5356afc081638f9e5562655901df31ef1d90eb6c13779454805d9ab8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187960 Malicious code in mechatronics-boson-quasarjet-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614492e5efabf1a1401db9b9460302bd51363d4bf783ef874d49f513e7be5bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-init-changelog-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b614267da4f23f5f60e5cd915efdd20c67963924c7f06564b4892edd649555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analyze-boolean-pipe-import-epsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d6af4eafe8bb6c343ca78255c86d63db6180291505a042e3bf2e432940f94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-procyon-neptune-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2913afaa34955cc3427e4afa8d9aa00515de6fd22785137fec6b00482eac91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-report-phi-good-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4466f1348183e2632c1a55a4604c3526358dfe8dc19f8b17470ec8d2a5ddf2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-technocracy-superagent-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e53646d2d71b5c3190b4a7f4ce2a5856e935feab0663a1a71b74d83bff06d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef8b0e335c02e9e3202c8e0195d3bfd55501baef7ef0af424b6b5b8eb2310c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-interferometry-meteor-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6c3541ea78c2ecfb39f3479845e5c39a51d9f757b6e133b00bfbbf73772c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hologram-jekyll-radiometric-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34423c93c7a5b13e9f1e0d5bd862054c215574cb60b2d0c3c0fc097a038bc7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cat-compile-analyze-deploy-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9514ab2e174c3c41eef9112756070b30355f2acf2e0db624c254b0fbd779b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enum-small-tau-sun-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8590cf5441e83e5a96bcfa4a8cc7c6a41a36b4151991061636a57ca05f6f9de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-radiant-weywot-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c66e0686c4618a725de20e95e6ce1715c68327b6ccc280c359a1139312e4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-fornax-umbriel-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3365ea447d8e6476fd1db57f2e6c33bf854a5c9ab298ad0d5aaecd0e6f783ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-bunyan-exobiology-biotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b06a1003fa24edfdf40c0933104e1de0372f879f7f6b843e6fe467b2cc24890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-zeta-tree-delta-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2a9aea8eab50320c779880a7b814aebf214304d7a582738f948d6c44cf0d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saturnology-webdriver-mocha-registry-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5eee96b9423cd54ac4f62a065004d3dac4b3e73c78de4fb77e91972eef1fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lithosphere-browserify-express-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdc8dd182e784cfc7505a87b79d3bb63e3889f3079e330bce2c95ac7d3a6778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-magellan-magnetosphere-paleomagnetism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fee2dc3ceeab278bb8c4c5fa3312ad51340599245bcdf8b5de8eeb28e8d9bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-dactyl-npm-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feefba00e2caeb92217dc071b9a4fe68188e1dcb407e37e274f1d84a9eb05646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...