MAL-2025-185752 Malicious code in baryon-eslint-ariel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061d29703953f2dc7b97effa3f9c7af300ab37b14213b9a808ac83c5a54ce6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185739 Malicious code in bad-stub-key-fast-minify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c2c8f6d14460407b52dec97db373eef1b32d2587cad3e6194362609b822c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189168 Malicious code in release-it-perseus-ini-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104971ab1956bef5ba298bf575f621a9701915460abbdf6ed5d42771db7e9dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187651 Malicious code in jwt-sync-ora-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c49f7daedd035f4e8d18a0ce96bc3b307488db321f2efdf26f2145f1162fd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188120 Malicious code in moon-old-gamma-deploy-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5c4869ddd3ada1d30aaaa35c240e8d99748ce6917156ee14dd323fe2ec849a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189763 Malicious code in supernova-dysonswarm-arcturus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb56d71359f955d83f68c2050ffd9f7e52a84eaca18c226afd9b2e5225844e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185537 Malicious code in archaeometry-impulse-galaxy-dysonswarm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a771881cabddee40de70b816e41a9e98fab7a207bc97d1bf8ebfd9b215ea40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186459 Malicious code in cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7deb0c94ebbbbdb091059c3ba19584ab4654ae5392ebc9f3b89e7bb345c09a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleontology-mensa-altair-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a633c6b86cac2930385f3eebdca63ae10a81cf8d77661d33d82855cd92e570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sandbox-hot-cron-query-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f43a7ba52f6e7fb74fb6de0210186e218442b2e26082f0f97a0a0b065a03b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-ichnology-dotenv-safe-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661d5a221b43803caaf19c84e4206e725b644315b902ab5c3dd469c48cfcd724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-hydra-neuromorphic-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d846a84569f47fde495902906da6a1389c1da17054f67fd652782bc62b8bb6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-rate-limiter-ophiuchus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1583797f17b8931350761f69b3d6a8224213ed0a89d3bfece1cf00b321283672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-meteor-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6caf727d2ca931162dc42199e8135f7c9bc25580dc02019ae90f6876bc9655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analyze-boolean-pipe-import-epsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d6af4eafe8bb6c343ca78255c86d63db6180291505a042e3bf2e432940f94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186040 Malicious code in catch-stack-load-public-grep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c509a0b517637027dd9226985a76750f86dedd7bb0dcfaf6449347750210a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187401 Malicious code in hydra-lepton-interstellarmedium-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5b0751525d924128f7d8f3f75bc81175d9c822a4d589dc97dbc03ddd75c01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189924 Malicious code in throw-async-object-public-integer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aa1d7a7d6befddd3451e86b4c9d3ff5167678967dcb13fa5be0d980ffd643a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190294 Malicious code in websockets-areology-perseus-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a0d0d816331e3b9eeba505a2091701deaf08b125e2a81a587179de98ad3dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189240 Malicious code in rigel-toml-meteor-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb277329d6ab2c16e35a5db9786b3b32d0cc5ff257df12232dd1afb5ee4bb67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...