MAL-2025-189922 Malicious code in thread-simulate-meta-small-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194fdfa3021ecd0ad01a51221e712454a6877d5e7754aa0208e2a6f1c908ffa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187317 Malicious code in helios-fusion-rollup-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e25b31fe31c11fea70657cac7ab2cab55d83c2a919aa7ee6feccf67d47567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188473 Malicious code in orchestrate-grid-dog-air-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71aac15729d4867908bda7b5b355123208f728af5b784bf36ac34155117e4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189304 Malicious code in sadr-janus-apex-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59c744fb77a2ce736381b7ec08f3cd0b18a638bc3d4bbd5ef4848fb1e89dde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189016 Malicious code in quark-charon-hercules-lepton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8473c670a25ac2c4782e9d65c46e0a8158a9769fb0bb2733da88072b9a7a2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185788 Malicious code in betelgeuse-cassini-lyra-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceaa53a75ecaa03edd7aa29ab318da2007e7edc0328de4c86c5f8b43089add6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185872 Malicious code in book-earth-runtime-delta-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca56a31956e75b2290ebd4b408475ebe5dddc60d039e85ec0ad1fb35dc980f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186652 Malicious code in dynamo-ganymede-init-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e715e8c5f4eeb44cf07f8c9b46a4f6969b8a88191d479a03ab364e0fb432d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189077 Malicious code in rain-theta-thread-star-simulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3986a9a02494b35678a795f640466720c5fe1b0abe17f68d5b83e94604660e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189891 Malicious code in test-theta-old-yaml-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3105bd46bc3bf37e1426594d233e6aaccf8654317b65946cf727eac0782e7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189265 Malicious code in rocket-vortex-nebula-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb509f13958f7a7b72ce609e2825f1e19061e7b2d65cce6416a6e965c065359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186005 Malicious code in carpo-aurora-pegasus-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546ac582d924e3111b56cd0c197fa28379cc4fcd4edc8ea795336dd44a1bd430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185649 Malicious code in auriga-inquirer-tailwindcss-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a752fbbdd28692b5babc67fa080558ecdcad6bd9b3540ae0e2b90d54315ddef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186180 Malicious code in cluster-decompress-double-encode-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10963e1b5a699315201d9cc43a9f176273375135c17ca2a87f1f06dd03cd0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189814 Malicious code in tau-data-grid-minify-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fd667a40b0b62ada505565aab53c39d96f06b26be3e9b5ce274831637ecbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-pulsar-redshift-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01eb7e5dee33aa92aeb7c166125c8a2a537b2b75814637049b7ce936ca515d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-callisto-commitlint-config-angular-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdfea94216d46394d4f07bde016b03bdeedf21face4db3ada1a9424b0a6e4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in void-oberon-supernova-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662dd30a3bfdab50f06631023e83a010a07f87f264297ccff4a1f470029289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-neptune-private-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f52b0f332657b30012e36de791eb249b16eb29d11bff1160e4f4b4e5e643cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-cryovolcano-dysonswarm-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f65d6b8e5c42cddf9286d718e0a8cb42596b67738c40351857045aa7c2bf9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...