MAL-2025-189010 Malicious code in quantumfoam-dysonswarm-io-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d4c40ddfac96db4d16617d8dbd26b31056e7c745f29098ffc857d010c1e67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187843 Malicious code in log-byte-cluster-uglify-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a9a1c276a3172723488745e2cc07805491a51b87c3a35688d78fd9b7cbc249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187979 Malicious code in mensa-fornax-chariklo-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bea88bb2438959eb72a95c8ba6f1c94ccc913f35cdb84ec7d3884727d656df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188801 Malicious code in prettier-plugin-markdown-aquarius-colors-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e02a281f78f15c659fc2bc0017a1f4fc72c6e3519a06df0c8b38338db6ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187526 Malicious code in io-radiant-kinetic-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3062fe4212f195fbdb0430f3df687e288bc65fe6c974ea700963c2c381fdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-webdriver-manager-jasmine-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab09b1b5b69cdb79894f81b1757af0992295947fae65208dd818da8f3817a483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transpile-double-grep-book-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553a60f9123c033f645a983384952a5b14109e549654cec24cd58a48befacbc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-npm-supervisor-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4759ce7fafd7b599f2d391dc859e66d40f9d758da169a2303128f81734a831f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ablation-scripts-pino-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a09232844c3f2e307a4baaeb5f7c22f13f97475a8f4da5286718e6fe1f45b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theta-air-char-import-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6554dbada648b16c3259f41ed32bee5cb2e64e31f59ae3378ad2f37ff181bc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analyze-char-fork-theta-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f903f79e67bcfa45a3643c772a60e0e3f7b066020bdb4dbc19eb67e84ea43304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-uninstall-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbfee41fefce5715d914720f5044a88f951f4b0361bc31c803542153c084c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-juno-virtualreality-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ab08056ce07e4b0fa7e42cc1a807d96b6b0be4eece882b85ff70488bfca3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-unuk-leda-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985868da95638b1ea3c6c5b706eebe02eb66931a258774e2bb9ef2a8e2dfc480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuepress-parallax-socketio-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bc0674a620983ea2af74aa10753189e4138f07b84db82b35cc3e0fc56b5611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-coronalmassejection-lightyear-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6110a859ba92c977665dd5d85d570cab3c612cfcc08897e35dec24f6e6bdbf77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in on-quantumfoam-nebula-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58c1cfcb579fb334f21a1208f5ba22ae4fc14bffe6418fcd65e27dd13c7715f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-dotenv-safe-markdownlint-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65059d3c138e66e932e624190cf09688f2f69178722bd6940b7cd7ebdb558347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-middleware-mysql-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef86514c1699fce4dff66864f70182aa42254817e8fe3bb9925c667d7d3732e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-izar-dagda-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d66262e7994275c6b59e3b7a607c7666b8e30293a518ce04b1601aa91f38c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...