MAL-2025-186369 Malicious code in cressida-jwt-loglevel-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c579391a28b717cc3bab01d83cefe0a9573ccb0c4b8dee4c27e98fcb9b1adac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186072 Malicious code in ceres-perseus-csv-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c056932c3d3448bce628b008892baa0861966b26f7034bfc9a2259f6077bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188504 Malicious code in paleoceanography-sedna-axios-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417a4d25dc5489d82b9a2aaefcffbab73253602a3712853452dca2b81765fd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189901 Malicious code in testcafe-scripts-phoebe-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e68c5cc63ecf1236bea18be4d8e0efb1e70538e8a54dd9d2010f86fbea1840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186696 Malicious code in elara-magnetar-asteroid-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52e755b198c774dd97904304558c2b73ba5f1ae10822199222a1172fa1840d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189569 Malicious code in socket-link-resolve-try-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d67a55af083d921f7f9ac00c877bed240fa3eaa206ab2eba52367102c6bcf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-planckscale-prettier-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fca005387f6cae31e007b8f9b1d5e146cfcca77b5b5758630e77c134eed57fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rain-theta-thread-star-simulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3986a9a02494b35678a795f640466720c5fe1b0abe17f68d5b83e94604660e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188606 Malicious code in pegasus-scripts-antd-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148f133e1fcaf9e6b0f51a92e0b77ef41f1bdf6ed12f5efd4ca90fe15c72a9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in void-exoplanet-ganymede-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9a2c790225f2e208964e0a25bd71c0f64b5307be9ad53a6361c7098f046d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188143 Malicious code in mui-reveal-md-registry-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ad89d8331122a15bc7cf5f8f5bff6b20a31ed3a2ccc02e5573a1f7b14248ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtaami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a622ee0a37f48c7ae4ae3bf2fdf9d7a8eb27b226023b56907fc99db6808f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaifoalfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7744ca8fd8ba1e2436b2f6d78d8193977c246188b11409d5777fe13dfb8a6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olialoba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467181e82b862b8c9a7b6b034bda9473abbc7c93d7ba2e21b659be07d8f1023a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxauban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888f69dddbc6892456541b46993fad8f95453779d80213704cdd054e5da1bd62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183078 Malicious code in item-at-labioizkapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944d80b54037c102b8b8630a2e2a1afe525d9621f3a7ee76e0e09812897f50b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoetfamola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842e6c7197064155ba4796581b7130e1c1e8ab7586b0f1ade39fdc9f2d7287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakoikauoak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ce3b1043814718b6b2283d845cb16185c26f41c5c9781283f44f2641dc2437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182031 Malicious code in flights-lutuig-alakanjin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa99ecc703c8ff3353434a077ab31c83b35faff5b4930c4e1486f4221e0d4d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184672 Malicious code in oliobc-uyg-ugiafabafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc8584bf3b41fcb355e5448692fafe6fa4210c6e37fd5778afe188b6c2c6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...