MAL-2025-186761 Malicious code in entanglement-pino-lint-innercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bae11fcd1d834d151b4d2a4fabd47aea93d666ed6b8a38c767ddbcfe35e8ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186877 Malicious code in event-miranda-rest-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acccf89c905da91626d03d95cb26599e6d673600757370009e4ae8d8b0962900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in export-bad-compress-fork-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2450caad5f166bccaedd001fd246098f519b199e4d01210149d86eda62fed676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-regulus-wavefunction-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a0feec94c7f2caf416d31bfddb17c067b095aa118051f9ba4b9b3b53c348af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innercore-biohacking-aether-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4624518d19df6decb94a7fc1c16a63c38a1ad699a14920802872453db27d850f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-eigenstate-markdownlint-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60730d7b1b3a3616722a67fef2da7b80c756c109e822a7f463094c8d3d4741df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-titan-betelgeuse-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f779285f8402967a51b4a701f70d23e5043abce71d017845f6f5674fef4929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in star-secure-alpha-omega-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e2cb0a810d53fc56e92cf8e06c67d354ced3a184d4958586921b03153bf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-ceres-package-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361a97cac0a8ce666550c7ace3fa953bb91e64481b6e65e216965363c50c3fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-panspermia-jwt-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32aaefb2b304146be7e51b1b87a1138b39ebe4660496ecc7827d7ad54346ef5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-virtualize-private-link-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4adc0e9d1ff505b8a506865352273ba4c53552e07dfa1f7c2194dc608ad2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187975 Malicious code in meissa-polaris-pulsar-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55be14a3895b75568b753b0dbb7e610f2c1ea7657cf1dbb55f0d70db002b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186174 Malicious code in cloud-star-parse-fork-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8952f1c640e356dec0fbec116b2f433817d877347505c728b5161b584a49ef99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187340 Malicious code in hercules-winston-janus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662c745f54f81147fa240741e0bd6e9bb86d4b36e48649b5f8c28febba93f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185549 Malicious code in arcturus-run-script-hydrogeology-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85308b7f547a69be0ec866ce936c922952149183b16feab778b8f5b68c64d58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187903 Malicious code in magellan-gravity-solarnebula-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3462e73d45c74f94a7ed03e5a2684f899b513c79d7d44b35e47dbfbcdbd206b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187829 Malicious code in load-float-omega-char-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17628a270991d0081404bd4691644acbb3f67c10136dbda8720e9bb83da80434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187309 Malicious code in heka-relay-grunt-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a34c9f4c51f9fbb8b1a6af7224378de5173d0150c7a5c3399e7e8ddb1e5c9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagabglan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26308d8cadb7c2ec9211c1ba8c4ecc1cf0e39d16871d360cf953f18798cd51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauscdocavgmigl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e0b8b17873a387f3534b8094054301702beb6a2716c4791e6ba8e4d48034a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...