MAL-2025-190056 Malicious code in unix-earth-zero-decrypt-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104f65dbb8a50faf4807c98c86ddea4df1e228f34b5b687aacbe3f6286776b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189129 Malicious code in registry-quark-barnard-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be35985da5091690aa56f84416af345aa641a6b98c78446a0a03f371a4176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kappa-eta-theta-sandbox-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274495a6c05031146e800213ab1b1e42dc632a5fe4124ecf87ff927338127a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190273 Malicious code in webdriver-mocha-isostasy-arcturus-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2f393ecb95e8e9f5f3425763254c5601275e09c6da401d019ce63fa0756169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186070 Malicious code in ceres-augmentedreality-iota-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa891b4634ede31623bc0fcd42bb4d3d610a695e74ed18b4ad58f1634a9830dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187052 Malicious code in frontend-kuiperbelt-proteomics-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c314ade66b9a498126b2a83549889c2c81a192088d4ff4e9dd5b78d8bdd4068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188393 Malicious code in octans-sedna-entanglement-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8de26676b02acc15c835b2db1cbc166b1c3da77c3fe9955268f44283710cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186317 Malicious code in cors-google-mocha-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d114af8d971cfd46a6d164d73ff566fcc20fb9de50a635c47f8b650efeadcb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185474 Malicious code in antares-quasarjet-winston-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17b561d80c863f9bd0531b8d955cb3377270c369a97139220b80e1e2a1e9424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189643 Malicious code in standard-apollo-tardigrade-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40754cfd5d3acd3d0b0766de8c414360da01d745f7dd08b9ca8e853ae6750b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187718 Malicious code in lacerta-ceres-jwt-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9ef158e3d8954448aae52a5a567e27d1ce378b34dfd354ba3f163720c80229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187001 Malicious code in float-new-route-benchmark-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9665f090704f17656723a9e6b1d4effa056e5de0f4bdede25a8bf2cccf60faa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188680 Malicious code in phoebe-yildun-gravity-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e7f8707aee62cb3960c90f21928bae1147bd91c27fe32db5fe802a976e89bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185758 Malicious code in bash-runtime-log-static-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21062ee5a5c866a7a6204e3bafb9fb0218741fedf29e9ba1781673b1216dba29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186306 Malicious code in cordelia-dione-hyperion-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff2b4d8c5947605df328faf7264d7223be4e7379aefc037d05f19521e539967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187903 Malicious code in magellan-gravity-solarnebula-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3462e73d45c74f94a7ed03e5a2684f899b513c79d7d44b35e47dbfbcdbd206b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189501 Malicious code in simple-load-info-error-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847a1870fc15c117080113e104ecb50fdca612614cda464bf9845173229fb2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186833 Malicious code in eslint-config-apex-hermes-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73ba82f9d9c22e1bde2447c605b7f915aaa35732f226fb83172e499f027a621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-warp-webdriver-mocha-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95bf93b3651fd9e5262e28a4c025dfe14338cabf906f3143dad4f1a1cf765f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-geodynamo-mongoose-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384f86bbea9a17c8c4c1cab9ac42af48a2f7da03267231823fb3b4ce4c94df69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...