MAL-2025-187952 Malicious code in mdx-development-elara-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc4bd235720b3f28d193fb963d4a38119a58061d2fb460cd83c464444e31b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185899 Malicious code in boson-apex-parcel-cybernetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8001d9511352d88a7e53000ad8670d8e302a9876d11a26a839bcbd2c058f4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187226 Malicious code in grep-cron-thread-grep-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96c23f95b586e6ef4496b6bac0a6041b218e6182f0466c153489ba900991452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186200 Malicious code in cold-mock-daemon-hash-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f437050931da1ccc18f821dfc28616294223dbf7bd3e3d7911b9d4d45878ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188606 Malicious code in pegasus-scripts-antd-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148f133e1fcaf9e6b0f51a92e0b77ef41f1bdf6ed12f5efd4ca90fe15c72a9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186299 Malicious code in convict-spawn-gravitationalwave-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d86882e0076d80ab9827d708aa6534aa225eee0e3afeb4af5dcf612c62f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188395 Malicious code in odin-babel-ignite-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd37aa3a95860ce014237b274e8d7b3e67d3ea95f530cd7113f4e831ba94719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185504 Malicious code in apollo-ini-grunt-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c48d74220a2eebde40d0798cba3ab887af5402c7d0e4d32cb8683107a6650af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvaginnvuvhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a039fa02a7d2331602ad518dd559399ff1135032f1b940cbf65b1d76daab9013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-aggf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e2b07d4c22c5981e9e29cb7dcbd5a347548287d5f6a2ea7485dfa6f6c51c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a47633d82f2b108b80973ac743eeee5eeae20a6f983e0cf0deb8eeaf6a77b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bcc6949785852eaa9cb9ece8206116a337b83963cad8b8c2c0e1a7dce49b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusauiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95f0e1932ee015b01670672b9ebea5891b4b5df2f14b7ffb7c5b6ced21d6d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb0d66cbb2c695b3d0c0a0dd4383ce96503cdcf8473262d9ce478efab9bc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgsfsdsdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0eaca48188be8b4267bc851365428fb33f97eb1d63a967589df6fd02859db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afff5282c4994862959982ed0c13bca1d23cf25d10d80927dd37f392e860c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756e6f297bc8738ecc787a94b85658e732550d12d1bcd2b9ceff95ab95dd52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1630dd4503bd45c8b3b826db1ec4e25f92cfe8d0cb4f502c085636432fe2baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafyudbriuwegfheryg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e7a35ab0e50fcb8a2b72f6c8887339058fb313cf6950a438874570194b28ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaomg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533af49d48ffc3eb40e8aaf9097abac9cdce74c307f085439b31fcf4818503b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...