MAL-2025-189829 Malicious code in taurus-interferometry-global-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423d2fb9cd944e08525cd67c996f1e7bc14d018867030474945cf79ccd4d9b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186534 Malicious code in delta-string-enum-thread-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdaa218fcf1da6962e6363ac39a9737390e281d97f094cb7660d1ec9e6b733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188597 Malicious code in pegasus-mdx-pino-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9b25739f729310e407971211ce7a65d98ec3f75743105e9c830595d96b8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188298 Malicious code in nightwatch-supervisor-hyperion-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1acf8297e72612fc42318e4bffb75532887d407ff062d75774073fb6cea9677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188735 Malicious code in planetology-deneb-betelgeuse-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9e76fd68dea4a218da7554c4a828cd8f512e9399f2f98a6ba89184f1e1ac45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188078 Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190323 Malicious code in wind-execute-authorize-mu-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bce93345caea591cf340b36a60b30e9eaa3c806ef3f71fbbf3a81acb565f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-singularitarianism-fetch-fermion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccd63704a8837ed8bae59ef565a17f740167e4fc9a2bbf7f4164bc2321af13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutronstar-native-dynamo-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64eb5f6281da92ca0de400672e8514b5e7e91819e20cb09e2904422be675fea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187153 Malicious code in geoarchaeology-hologram-xerxes-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed54989fbcb5736d4c2e1a525981e4144b30d7880a6e267468e8ee8ec1c7f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f44b504b6bf2f8f71a4689e1cb2ee8bfa3f54ecdcd17265d6bedf2686c8c515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agiyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84cfd6846385891cbd3e889dd7bcf0d6afc6ca6a0246474d78821909c39a233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobaic-goib-gvafugauafagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599351f460b11b58d9dfa02c0b3dd1abebc885a5031993ef3530de89aee35662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokulia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cb22d315a501d03b10e8adbaebb56ad3c4455a69a9e6796866a8af99e11574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba52c4c9ab56d449a088dd2fa00e9ba2729989d75b6de74d64fb2e47f6311e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-onmi-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43982350be1a35b6e54572e823537393d0a39287ab74787dcfa14c24aaa72b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimafuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65949ae5000f85c964473d14e8565d5ed85a055fdb82d7e0283afe50e02b047f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4ad60e61988960518fcda8bcdbeeb82eb18575c188daff702513fbaddc1232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90863871202809f863e22fcff6fafde6e0d34a59b688294784c84ff57f7e4333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigafafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144290afa69a829cb4ab0bfcb3ff475288a181b2f8baa5ef701f052f0a3d303b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...