MAL-2025-189850 Malicious code in tectonophysics-sequelize-whitedwarf-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a418c5c79fe80c62d72488d51e495118660bbfd475cdb942da5cab826ad3c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189813 Malicious code in tardigrade-virgo-hologram-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed42039e0d9b78e3cd59ebd720e24df16a2da59377b7c2fa98dada31223e78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186503 Malicious code in decoherence-neptune-saturnology-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b550a9f0da242bfe9f0ba64dec95e44265c55f7236a1934c5bc5b965ee23c4c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186898 Malicious code in exobiology-adonis-paleoceanography-biotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e3f19daa5dce244d8394ce62ac03072f8141e96de5ab2a4497871780331b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186382 Malicious code in cross-env-flare-hyperion-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f080b8e739095288c5b6591e7120a4df20933d6f957db23a93c573d43fdfca27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190381 Malicious code in xenos-upgrade-orbit-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22aacfc70714c921495c0072e931272fb84602da273d378a399fb895e36b109d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186890 Malicious code in exec-proxima-ophiuchus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b09158f6d460d1b85b22dc0e801b0489afa54a047d31b5575832b9be64e623a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189127 Malicious code in registry-local-biotechnology-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9231156a824bb7cc0a68e0cebf262d6d2457c813ae5b4c9f8b5ecb2229089b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186446 Malicious code in cypress-cosmiconfig-dotenv-safe-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fce32655c7728a7fa545451955f37976f28b6a389d3c9b3998f1c6a0a5ae7ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-helios-bionics-virtualreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1022ecdd26947cec0f0053fa453beff0e4313b5d2fef4cee8a9101980dac690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187214 Malicious code in graviton-sociobiology-tailwindcss-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7952f07b66118ba76773e8f7827c06eb1e958d529bd65938ff48c0bfd80c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185632 Malicious code in async-xerxes-filament-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc6163a409dce77356ebc5ac817d18a41dc29f36100b23bca2dd937c8af4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188632 Malicious code in perseus-selenium-lepton-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfc1cfbb199ea1ca3bb90c697618a7d74ab51f4a88a59c1319771b74755a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaeav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1dd553d96a41279e5731f6652ea10a2237a2cc9f72ea1b0964df07ceb3b619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-aloinali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2191db3043ce1369eb85c38508c92d4ec41dcbd3111849936affa4e6a8b315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-aki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d67e223c5617163ea4709c518ba42d6b99413519a3ab0dfa100d67ef556c381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-ofe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb17455f65253ba6be5fab612a797aa6f0433340a49ab2fdfcc8da3e2b595f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugaifyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb2344d8a0b6a0ed2196e8356ef576d4daf84c1c180d8190ff48bad216fabd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatuagfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f493869c769f23ac07c56080dd6ae65fda964dc499a5e514f435595b8f59dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb41dc9409890ddbe6977aea14980a2a460a7ae3fa4e5d2dae0c1c7b337f9ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...