MAL-2025-187040 Malicious code in foundation-node-config-farout-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3793dd3ff731c5c1110f0f04402bcb024a4a5017e8a91628e170d29b6403c4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187525 Malicious code in io-quark-babel-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4b40a9ef6ba2338b307f6019ef8cff798ca04f067fafe984721e61b3924902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185377 Malicious code in accretion-avior-radiometric-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3811d7127ab0f5c5a2b3ec85970082d7d64f2cf6385ed38227ee4a60dbb9819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189632 Malicious code in spy-sun-byte-debug-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94dcc9df0438390b12a282f8619d7e4c2c062b0442a82501ef29e1bbdbb48902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187316 Malicious code in helios-epigenetics-asteroid-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6377e2b79f3c071d80e2ff88f6a1bc2642ed48e5cb294511d71816003bdd01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185586 Malicious code in astro-ignite-scripts-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bba3a708c5a453f96034e7c4d3cf4270b696d5f709ddbdde132492bc811cfcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187313 Malicious code in heliophysics-pino-umbriel-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d13fa24ea00cdcbb15ac488921f9c6c192ed00f12f1b47d659992b4fd4f4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186923 Malicious code in export-psi-zeta-upsilon-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f1ef51d519c74b84c078dc5bf56f9e105291710857d19dda790846f4d0bccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185589 Malicious code in astrobiology-brane-cosmicsilence-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b6b4fd8ed016d865ecd9f0470d10e9a4a33aa1bea3e56dab915fe159f08a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188915 Malicious code in proxima-neptune-altair-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ca7458136d92609e9587dd89f19de7cdd64b1288bfa111ccf3d25f03a46d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186393 Malicious code in cryonics-cypress-stream-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e533649bc4d4bab67fc1c2e430b01f993e7a362899875e82326aecb1f8770f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b6bd6c7de26d56aabcd94dfe8ea4a1865635b16b8f206aac27e975ca9199e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcadgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541cb764e24880fee7bbd1465dff38717ca640fb7b6010f4e86dfe4490b008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafifug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f029352f431dc278bdb6cf3173e7a5402f991dabd4bb22330db1fef957774ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-idaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f11d81ca795dfaff6343ce2818b0cc22dc2d230a6e62fabd10874586b6e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iltag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a5ed9d8ad313174e9fc3e6bcb71c08f1dbd37cdb30b2aa86738f3d842d342a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0555f8aff6282b6348aa4592989eb4e4f1c76bb6f7c7e133ac31cbbf6ecd60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-ufisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06c2c3df1295b25c44608ab420f61d42d351f781f4f5e5e3d51a3f56b2e26a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmulfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74df865cfc82a36b129a9a67d03842314a9bc49b75bef343ec3ee442e4a2267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvfugudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7971b3e149a13b1b8a2add0cfb73afccc42e45718eef695f5e209d55f57bbd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...