MAL-2025-190118 Malicious code in ursa-testcafe-innercore-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfce035eabf7825c0a7f26269b5bf0b12829681278f18b5eadef5359a7fca39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189389 Malicious code in scripts-octans-redis-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eef1a3efe8dfd4a127e5412b2d19e562437814fe0894cf40f7538e6c567bc50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186667 Malicious code in earth-visualize-abstract-beta-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdcb9e255cb40cbc9b3900e368a05edeb31be8f58530b34dcf7f168ad49aed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189902 Malicious code in testcafe-titan-fornax-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ab67a6297012e58bbbca384b01496596446cd811f997a2a86a2baf414a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187182 Malicious code in global-mesosphere-extremophile-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026bec84509e820a32ef1a7cf7eb8fa3d64b4a3ff41ce8a3e5a1e909f5e90560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190190 Malicious code in vuepress-centauri-transhumanism-astrobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdb05993db85d17c64f179ee15f5d3d4425016c0f6dd71699c1b011dd854db6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189049 Malicious code in quito-cryovolcano-nightwatch-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a24e9acd11ed85f87985112d1bd7cc1e77631e7593134f4b3a95d72977e303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188747 Malicious code in playwright-wormhole-phylogenetics-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998a8014614f0315a660ed56446d83ec0dcb914bcbf25832b2ba07ba5e3b4ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in index-short-java-phi-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e263ba680a09fbfa7fa23f8bee80092a3b81959c15f1cd633d5a32f174fd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186559 Malicious code in deploy-awk-user-psi-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85974b235976ec2159baa382d8cac5043c2dfa29505a618c566d90e5a64e62a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old-stub-xml-deploy-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e8f422e088bab75c4abb1e298f807dcf0c370c443f55e40042e701ad51990e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgaodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0d175e55aea192ad19b9056b8b8012d132a0f9da3f51007c41e180773ace1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimiankunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4e5714554d8606d52cb87fb11402c6ff6be45b951947d72f1a17085c6bf6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-aibabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8267c78c7f568940847d6de9ffeddeda4a928cbe1db6c1e73d6a3b130489ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uhfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb9f53fd250b01f99b84fe957bd0216fb521e550c29f1c7c904c1d59b4ec716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-auguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af38931dd6492a7318bc20ac168961864e8ae39dc5bfef3ed86624c7488cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8344e78f61193872306260e62e6648fabc0b82ca4615dd652d88424e0595c75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafuyfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923f22842c56787224a76dd5e83469d88490e6b22106b6d05d232027af7f0290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfasdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9099ad984076c218a195b5657b2edbc59e8e157ebcf9f6e023bb566f755526c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb536bcc403edd62b5ed41edb6ddaf7f65235823652f9bd4bfa97b15a039f93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...