MAL-2025-188184 Malicious code in native-rate-limiter-uninstall-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38f83b9375b1dbb5616eb88f859c2dc6f2ddb8d31a21fdcdf96be69a301dd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-iota-lyra-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe3ffd8977035d4a0def8ba740d894f180ef6f02e00fdfd2d89633e773386f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189326 Malicious code in sagitta-wolf-barnard-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 087da970166c0f101f1d299c7a994960afe6bf59968564c9c7b8f32b29c733d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188471 Malicious code in orchestrate-awk-encrypt-moon-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c37f89d8c089dcfad0ba9ccd12ae226e2a797b3337fad8b5f9809995d826d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-react-bootstrap-heliophysics-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68274b408b6fb2382a5f5a2aa275eed20c2fe6bf4f3a8f6a33645d810c97545f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186766 Malicious code in enum-new-encode-tree-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3f7f2e99936ca73aba345579c67f7c9562105e8768b4e88a8d8ed143498917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186232 Malicious code in command-dotenv-safe-oberon-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e05545b4c2052a90e9017e988b2a71db55dbfd8788af2c5cccbf3cc164426f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189169 Malicious code in remark-barnard-commitlint-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fbc8f80c4eaa1b4e6c6d18faaabd90528b2cd1b8a5e7b7f6333164c23b83cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188255 Malicious code in new-alpha-transpile-air-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8e3db03121c3663892d5f746b8b321a800b7a770d3d09ca75fb79837f5ec84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in catch-float-cluster-assert-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef58c9f874c23e8a9b27a97cbc7a46fbcce68e4f6bba08731fce9b4108467a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189570 Malicious code in socket-minify-export-catch-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30d97ee2bf204b3fc45d68f49bafdd6a020615e4ad51cbc83f463f193b80ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188570 Malicious code in parsec-oauth-jsonp-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d8b51f1ca029d90bb2f910e5f3d92bdc1573cc4f996ae4858417ff3dfd2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-aurora-ionosphere-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d618fe2bbc27849bdb3b7ab0735de3ede48bd7a4f02e7614ea1745ea65ea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-cluster-link-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457c2e864673b1e699b6d103dedadc301fb27dd6c6ceb5e99f0f2acfef90a5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in string-container-benchmark-phi-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eeddb7aaf4eb14b9f84cab9ef4d5c482fe254563dc9dfb921f8ee860c3b659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186391 Malicious code in cryonics-blazar-nightwatch-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979ba0303bc9ddf59f3fffdea34a170449c211541be498556e023a17ecc3e919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stratosphere-speleology-rollup-plugin-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0070903b281cd33d856ab30b6eb2f06f5f37806f5672eae32b0dbe0e003d1158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187510 Malicious code in interface-stack-mock-execute-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc20e53d07d6acddd739f4e433e4d8a4bb9b9679bbf5027a87b77495cb36177b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186969 Malicious code in figures-miranda-helmet-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53def4b573229bf498847e43f7136c42519ccd7b938ca0c0ee2266bca66c1fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188551 Malicious code in panspermia-zenobia-cryonics-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d62b4d8f6f507350616a579cdbce18a90c525a7b7c57f5777d99ae7a748c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...