MAL-2025-189520 Malicious code in sirius-react-bootstrap-ignite-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc6dcd2d217e217d0b5ccb225e7f9e203388db94165fb0a422d99841f2ce048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188277 Malicious code in nightmare-semantic-ui-init-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd9e5c43cd91768bb1e1d176eba1c1544754be3fbe8355a892cc84adb8667e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186345 Malicious code in cosmochemistry-gemini-release-it-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41718fd69b8698a75fab60d886012af544c433ee2dc1ff773bf84cb35cfa684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185622 Malicious code in async-iota-pavo-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1b1f4251a47dc183f09a26f155bd0931ec87d8606fb9177ab5ad1f58112403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187574 Malicious code in janus-hapi-ganymede-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c51d1d80490a8edab4326366977f4ecda45c1d5cf1496de3d5227d9066fd684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187295 Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ee4465c470511ca5e9eeddfdda3cbd2e91351b7d6be3534042756782073a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189924 Malicious code in throw-async-object-public-integer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aa1d7a7d6befddd3451e86b4c9d3ff5167678967dcb13fa5be0d980ffd643a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188103 Malicious code in module-serialize-fire-bash-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a46ef2a5eeea574812f8195f6276a061db7134416045f32a5444ac99d064d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lepton-husky-phenomic-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8e5f8a7b80fc50583741a5d4fe7563cb8ec3706c4e734dffb7de609c501073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in report-water-view-cluster-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d47942fe1d8723769bab30f3ba8f16a7ae89128a610ca5f2b3506215e6bdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-webdriverio-event-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13ec41d982e5391f4a58b51051dc7c843a88857fae8f519de3e3ae4dcd6f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rho-enum-secure-short-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc98f3a6c284cfc1f088763be06cffc4b095839b8639d60ab0dc326aba9d00a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-eleventy-io-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba874897fdcaf548e9b7fbdb00270ec5ea6feb9cb237f6dcb0946a480910f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tau-moon-scale-private-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e39b6af5aa0b6b25d8b7e6b8d55595b0aa3c3e86f6689b8c787559f5ca865a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-xml-stub-fire-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2eb0e7fa0e94ac62c34a36f3df12ad663540f26fd5d5989d0e3c8dbfffc90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-cressida-umbra-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16d7f344a284484ee4c9862dd2dd6ac94ea09769be191bef503fb4a7288385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-perseus-paleobotany-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50047252fce66e072640cd3c4b7303162f58edd8f8ab3107fdfa9cd848674d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notify-link-proxy-double-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de377cbc6f858fb4b0e314aa43e079dae521e3bc61f5b17fd5d32bbaf64a6667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-jabbah-chalk-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3f9316015fa5ef848708130ef54aed0cf418b68094a0778716dae464213509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scale-phi-deserialize-nu-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da7cfb294f277c58d7e8fe6484b55c4210fc860ea9b97bd8165568c264fb168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...