MAL-2025-190419 Malicious code in yakutsk-saturnology-grus-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4961efa46f325d6df30059ba2e89e8339f33108b59167bffb87a28292d67154b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189229 Malicious code in rho-alpha-phi-cluster-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e7a4ef57dd54f76ac6aa11467b48f4f5cc687a1a46e1934d0b1dff8c2cf4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185590 Malicious code in astrobiology-flare-repository-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883c270e21889ed0f7b356d9f7ecda33006111d85778289be3c2634ca143571f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187317 Malicious code in helios-fusion-rollup-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e25b31fe31c11fea70657cac7ab2cab55d83c2a919aa7ee6feccf67d47567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188851 Malicious code in procyon-yaml-figures-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7740a3ced9536b2d669360d3d0007870b01aeebbcd11690bd66779cdad44da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189996 Malicious code in tree-validate-info-signal-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698999b4d894fec9e7aeed2c3d4cfa851ccefeb92457f45e03cf92331e29f7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187746 Malicious code in lepton-xanthus-paleoanthropology-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f819ae12bffcff278cc70e29a906edd0faeb0ab3b65eca9831126320e7ead4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186667 Malicious code in earth-visualize-abstract-beta-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdcb9e255cb40cbc9b3900e368a05edeb31be8f58530b34dcf7f168ad49aed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188097 Malicious code in module-barnard-ganymede-sociobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318ce5e99a1844c93f91036e8137e440098fae0a90415e943e5bb1c3a0a191af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185872 Malicious code in book-earth-runtime-delta-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca56a31956e75b2290ebd4b408475ebe5dddc60d039e85ec0ad1fb35dc980f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945f1602f50098527c16f9da5b6ed99ee65e0c906e9718c0da407fc41ffde44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbaivuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3904c486d9c3a96ea1d17a3dbdc59a24ed3dd4d35afe1f810c56124e47e2b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoa-inumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e770c03fc66224ac50a30317170f617931d5c20547b39cf0d209f874179644a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagafah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f3b41836eb5cd3783ab9b26cae74f012d0bf9afb2fd45df1f27d50afa21f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-giossiosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b439362f1dab8f502bc68f9343a51dd556ac3ddbb44a4cf0d3c9f0e66b801764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adibalnlo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4e64a0b09b411bc2ff0a12c41424906d6c66076b6180d89787018839aebaa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabualikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca68d459ef3332387bdf95d25826d11caad6d4359cd253e259bf599a17a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-anaumini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf230fbb30da9eae554083e19e5afd5249c106761abda36efd5d2722cf2bb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-cba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559b0a68f2d567bbceaf75523b800f531d0554cda1c14d3947a701aad8706f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...