MAL-2025-190103 Malicious code in ursa-auth0-delphinus-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3d75c84533df7d7cbc4e6990cd81f583a0ee3f1095671e9cad2c2b7ff44e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190228 Malicious code in wasat-betelgeuse-mini-css-extract-plugin-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72c3967bfa61a9dcf238d33c4284ce2f1f41d6b3f850a019d161f7672cf5834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190464 Malicious code in zephyr-hyperion-cypress-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c3120a7bcc6b643e7ee8de6d0ac0d7396a197a63da497db369d04c59ebc39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190183 Malicious code in void-uglify-warn-export-zero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a289220d5fd74e336a5702c92af3412df6ca9b1feea3e4847d79f92987df0c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188921 Malicious code in proxima-thermosphere-weywot-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2244dab451a96c625aa78d793fcb3ba1931ffe5080498587c46c6bbf7f5a3d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186414 Malicious code in css-loader-castor-supervisor-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 193b52bbac9dd8c437627cdd8702135559f279b67db8494364cbc1d7a07bfec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186537 Malicious code in dendrochronology-colors-cosmos-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c58b497bfa810639e7f04a95d1dfdce0066084759d6a3d71419afa81f4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagbyyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb84ea3c86b8e2cc1d2aa0bea66198c943caaed7240aa2e36ce60398e7759ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hakumajiasubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f47e78639ba6f7e946d4b4ab8bf2f1b556fd060cb2aefa88628cf477e7b65556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugkda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503e18d6cc0d9eb3fdef9ff461cad20fedcb0ba5e7b8471be3a214407e1eb58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nuu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbba432e2d02bb240a2d15b9075a64b30dce2311d569dfec391070baa1715a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6e6123a645caf59e7fface4348da44fbaa41fed9627d4bdeb283124d759fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iguqakuraduidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a7d13ce843aa7f030274cef8c837093afb41ba64c298cc675d96117b403183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujihujafdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9b856ee6149b82aca505633f8ad8666e5bf3f4b23084c3b4ea1abc4b28086f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbd76e1570a2318c9d790fb164705193a0ccee0bb9a7957c668907d024981c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f0eb0a39024c8fc860d6f8cc15bbc3583073ee231eb3215305805b04d7f8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idlisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddffe8a09899201dad1445250f5ce219c09c9b0576f3a245c697e122832bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugogiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20158852983403c11bf73617b03f8013a60feb1e63a03e92dcf2ac88069829f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e05b5c85ea05bb9a1810984da2117b3c966f311048adfd80e18ac11a32b04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...