MAL-2025-185866 Malicious code in blueshift-publish-carina-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c549f3f83be3a9352be7a86dc574afb8bf0d430bc7e01a82a70d38bfcde7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-redshift-plutology-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80168c73b44e90a928ec018382d63c6a2d7f6cfb4ca8704de3974a762297e32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187654 Malicious code in kappa-cache-process-byte-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8fa30fc7c162a6094a97409707dddf8e50e05a0d0106276d65c351e656ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-elara-hadron-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5e131353d5f6106fa2496e00f7ad443ad3e792fa0a1d9faf3e536b245446df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190431 Malicious code in yildun-blitz-miranda-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9aa6adbd171001d6774e9c0faf6981e1b8230bc776079be2918fc0071a823fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-neutrino-fomalhaut-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f428902c9048480558a598f879ec355d21f923763d3b297f190013b90c371cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189973 Malicious code in transhumanism-cli-superflare-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039599f02d93393fef55555c47eded87dcb54d3570cdbcd5cf54955e04f9479b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187113 Malicious code in ganymede-style-loader-xanthus-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a5f45d9564f44b2db677d8a064664c3950bbf58615506c9507134b1044b3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-eris-europa-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eccbd4b1bb7d5335c4aaa91ebd9e32a321a8447290883e3cbf50f61a29cb747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188300 Malicious code in nightwatch-wolf-kastra-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc11c8b136e87a47e4ebc50c5125612dec4adf8b6bac24b47f876dc9e85dc5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190109 Malicious code in ursa-jest-antd-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d33c8be0ca0bb199e1726c8dc39437ee5c00d4402fc8e2a2ea5ffe0b0846ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188885 Malicious code in protected-permission-table-warn-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f6802abfd23324438d7869a4981ba93ef5e074c9827c2a2d9975c81193afec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189219 Malicious code in restart-apex-loopback-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee23013fa3827d0680b480bf208efea7b8f2b19d350a6479f7efbdf498a4c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189207 Malicious code in resonance-frontend-gatsby-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 767c5763c0e9f030f44d1418fbc8f6df42ee2c3ccef64a4c4caff741dd2b036b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187122 Malicious code in gatsby-fornax-nuxtjs-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17493a8c27f8742691d5fb50ff801a6a531114bb0524fe9605d6af16d32780de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188497 Malicious code in paleoanthropology-helios-auth-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e67ea5fb796d68a806e68066027f59e37e6980576eca3fca83fbc833334b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in refactor-private-table-finally-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7fe350226f8e4b7671ddae6faacdaa25fcb6d3a536a3576ea5fb7a4c42e214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185878 Malicious code in boolean-fork-uglify-dog-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2398286c5bd8b36359dfe96e05f9bd79387f0ed461e40f664b3528ec4bcf92a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbriel-gulp-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191c64e27e6c7846f4fb786da99ba6ab75ab274a4df6b2b6334a001d7cd9cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186587 Malicious code in dione-kastra-public-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e45af73e65c8bb69b8936ef251a668c188721bb919947f8884f6ae981cf02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...