MAL-2025-189402 Malicious code in sed-route-encrypt-refactor-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed1135d1e30d5da6abef9427602d2d9b7c72558bdce98188e17f068674d637c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190234 Malicious code in wasat-photon-await-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928a8be2e63151c5a44872a4540168eb5702dc997d95293ab99824e30466315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188749 Malicious code in plutology-ariel-subscription-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7586875995a9248c1bb0d69061389e43a86bfb28b5f8a11e6aef21281d3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185788 Malicious code in betelgeuse-cassini-lyra-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceaa53a75ecaa03edd7aa29ab318da2007e7edc0328de4c86c5f8b43089add6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188642 Malicious code in perturbation-nextjs-singularity-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b165730c41881b44c233e780d2b9bde16b2fa49b0f012d8c28a06092c15347d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185547 Malicious code in arcturus-nuxtjs-cordelia-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ed828d4efc8fa57e88ad8c077f137feda533b4d5525b0a6eac490f310ff99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188202 Malicious code in nebula-development-less-loader-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176d9ec969819536ec693125456e7ec41bb0dcc6c65811409b1a99ffb0fbf13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188725 Malicious code in pipe-resolve-signal-uglify-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c40780bfa0a60a0f11514d456c9de6b44db34fb75557dcc422ac8974ca8ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186555 Malicious code in dependencies-galaxy-install-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5276469197c6221f8948ff69ebe656dae79f34980fb1e4e95a39c2df8634cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189627 Malicious code in spinner-proxima-cybernetics-cosmochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7452dbccf4e36bdc41bf89259059d35e9ad079945737d08d43590057286583d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudafgoacvsigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7c9a72437d68919e1ccbe51ccfad57b3ca03a97a9a801d29ccf285a8c35aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7eae4c0606b881eaf1d5cc9ace7cd68e85afa28d1269cc3fcefda0e329d745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololgybu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09053def6dcda811d9337dc4d28b9a83eac24c39ad8ae5e40d1e217de9b81040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafufunb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e740cc80f03476474c2992128702a82fab795f02dd97c7f89e09519374113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avcafiaacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c74fb2f6d559b70ea456567f549baa164260f563def2a0d9cd81cfa443805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtaoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7196b99e7f595492c27579f19f8630bbc43828c82841b2e1fff9d34b63d7c35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimiankunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4e5714554d8606d52cb87fb11402c6ff6be45b951947d72f1a17085c6bf6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e72723fd60f6fe8c9b657414bb697e95f4c8bb06fc64acde808f82e1462272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edf7262cc8dbc2fa0c4f4a5a55e46a311e0eb447e33bac8263be5a8788906fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...