MAL-2025-190047 Malicious code in umbriel-leda-pipe-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbced70f13ff299b1492268d064d3da9078e4feed78b8d6225d5a2cb765ff9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186037 Malicious code in catch-byte-decompress-cluster-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefad3485f3c39e57462bbb18e12e7d3afcdd9760292343a4878f2dbe8363fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189283 Malicious code in root-user-await-validate-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eadca940140bd92565e3b06a732c77498e9eb34e843f9bf2a52c4c46a9edac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188720 Malicious code in pipe-grid-byte-old-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707c043a8df19e2deb325b85449d0ea39297d0bfab853cf484146aafbc444bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190292 Malicious code in webpack-query-thermochronology-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6ba0afcd681d793424b23a2849d2d1319c11a0069ba3956b955fc994186da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188830 Malicious code in private-toml-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83662ffbbdf17c2aa4ce2a64870ae6d6728121491ccebd14659d7a55f9536b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186589 Malicious code in dione-troposphere-oscillation-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3d7c0217ab6f013611a85385ba9c99c8a4cb62351eb29fac80795276366db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186268 Malicious code in concurrently-hawkingradiation-tailwindcss-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2666bd2deaa384120f711b4ca42f1ee157cd1ece04e11132de099f8803437863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189666 Malicious code in steganography-hadron-stratosphere-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7507c5194be430ac6904f8bef6c62434caa3f72c17684e430f7a5271af20b0a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185750 Malicious code in barnard-soap-gravitationalwave-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fb6bb311abe39715f83590bf71d33b3e1f29c30ebcd134a8d514362a9b9313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189000 Malicious code in quantum-computing-technosignature-ablation-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac35117eec102497f8ce0b0b5acf8d3e1e4d43654662f1ab0ee8af683ebeaf39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188868 Malicious code in prompts-capella-node-config-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5f5aa037e69c5712a92678019d6d286a73fa6b441140f34d4a29bfbecb25b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186931 Malicious code in express-terraforming-nucleosynthesis-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58c13e8ab6630647d9a08c3b65040effac140f3a388762a6acd5eee532a1a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d628e2c86e45a67038b100ccbb7cfba9c867d685c1ee99c88dc4b841747fe1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff31d31551cd8e922fa0afda1195d08b39c347a7b6ceba7cf3377e8a49d0c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daa846c4290a4ad13294f14edd560bd708b92df05f61e05c3bec450e4fe3811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kuu-bofauffsni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7481924f07c1100b891f90804b16217eeeeb2c29dc2224700010672a31f2991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cuwabimagoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a162c9f48ed5b861afc11a9018d73037446a26f0c3e9c88f61542ea893ec83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cwimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae055425a99dfba27d814fea570ca7272df9a52298385c10929fc126b6a2a244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrstt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5827dd3e94fecab4b4c21d6a1c267c22b81ce7df8e5c5199eb87c00ebbc7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...