MAL-2025-187176 Malicious code in global-barnard-protoplanetarydisk-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910c41c66c48d31941c2f3ce244040c413f047435e8c773242bcc0c1ccc0c179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-compress-phi-bash-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4452d7b0255f5bfde9306684c29b815108b9f682b2d753820f2f60cabf2806da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188336 Malicious code in nodemon-slides-frontend-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4161a9733ad0657a992b0e3b792993775b939fbc4452872a0be0abdc96d50eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interstellarmedium-coronalmassejection-hadron-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a445cac5b8c65ed165f968e49394f1d485b9e541be9e0b2c076c6189c278ebb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-taphonomy-fusion-exosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30607827e4a44c0862bedd788a86ca7e751a17e1b53d4cbf6b813e174e0cfba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saturnology-equinox-cordelia-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2012d2ac417eb462ce8703bb345d9b81a93b9f662efa8b31c9ee85cd611fed7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-loop-mdx-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295429884cb23c05cd22de2b6bb4cfe7d99359296b20883aa2aabebf7b820b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-carina-astroinformatics-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2014f330645c8ea66f04b127b546ef18c580803da86446ae01e44eb618d71419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-wasat-javascript-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1995b86a42719390fb786ee154c612d1535a6ce9c7c97401e18f9ec57b8367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleontology-lyra-hercules-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6719be20e59d8b45e65d841f7ecb4762b0113345b1250aca102c4a5cc12ac0cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-csv-gacrux-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ced967c56de8ff045642f561fbf86c24467688d2df7cb1d27846905ac9dcfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-meta-root-try-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e240ecaa5180d2c3bb0773d383b7d3624ca22e35d3c052302961ef5c975b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-chalk-ini-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45cf21208b56ae1d0da3be8ce48b148ac7f6247e8b2ee4ddf53e45b162060b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-proxy-alpha-cache-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d5ac7627756a64de4a29db4eee74e5ef1658bac2e231d7c74956658e3c4445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-cat-fork-char-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5ab55b4c3e29acb931e3d95408acd0a439484161dee1fdef22b993a7942071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alpha-view-grep-abstract-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a59d4ced0983d05722b6d4aa572be26e524f6f5a4608478d2b47cdfcd656793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-betelgeuse-package-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6169441db67c1ad514453675544949307be78e6e2a8931aecea6222e243212c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleontology-saturnology-standard-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4555dd27e7e62780ef0984d432fb6a5e16fac735e5253883450924af4b600a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...