MAL-2025-187628 Malicious code in json-stream-aquarius-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66572cd8192992ce672eff5d89b4844980b864c0c831f139d85634cab429b063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-radiant-weywot-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c66e0686c4618a725de20e95e6ce1715c68327b6ccc280c359a1139312e4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187800 Malicious code in link-upsilon-link-kappa-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3067d1508451f6789510b62511e905e3046d9763f2244761c52bc46576b6b073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189636 Malicious code in sqlite-telesto-commitlint-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8fcb02014ccc5c54f4be47963ecbf6340f0204fbc67be947ba69f44cae5166b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-buffer-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47310359866ad1e902cf5ea4d54ed1da4c69f3abbcdb2e4423b5f5b5984e09c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190033 Malicious code in ultra-mira-centaurus-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7451d5363e279f93ef5dbee433d1cda8986b6f0b27bef6015f624c91737ad440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dog-process-file-file-moon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e1459e69ec028b22bba506edaaede14ac3a45a1b48d29ce754a8be9f0a3522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187038 Malicious code in fornax-transport-webdriver-manager-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221b0df03709f994b5ba17d503c03bd119a376ef0490fc537e74dc1413048ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analyze-meta-error-chi-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38af8bd8e647f4b19c41cc9074e2ad04540c78db7931d6d32f603a36b415cec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185799 Malicious code in betelgeuse-taurus-nestjs-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be411ae3798c8961f5e66bb2a16caae81b4503b25468d2eb9ef4f6a417f080d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-australis-inflation-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ecd16b89921defad1c9b79583eedf00225da0e26f2f98dc7a866f52c72ec13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kernel-promise-proxy-xml-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcf722d296a805c892de52ff3cd2ad37ac131c515bfb952e27dae7d017d108d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kappa-notify-web-encrypt-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adabf06362cf23d6c3eee9d92b084952fd8949a52f6b30a787608914698c108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-antares-update-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faae86e3561dc9f38756cb2bfff0accf7d215afbb11969a94ba45bf705675a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190160 Malicious code in virgo-terser-webpack-plugin-resonance-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab26d4bc9b5b8cbf6996ce1f3dfcf3ed1761087d93cbcdbea53728f32230010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-uglify-cluster-string-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9357c297db533d262818f4d94e063b4ca7a1de545294cd6a542cd3cfd595d937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-fomalhaut-apollo-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0159cd9626a0e52af757ba48b3488f9f060a2af1756b874ecfbd0ee5361b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stratigraphy-archaeogenetics-pino-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8b8215edc8d75314fd70706553211c18d60e357ddd2ba33d98c9aebc7bfc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-alphard-event-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516651765e6ec2134077f6e0128dfeea44e2a4ea76469186f299a7daa07bf2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-frontend-glaciology-selenology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff8d2d9116da16fbde5a2392699bd79ccf9484cb2148905a7dab7fcd8c8fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...