MAL-2025-186113 Malicious code in changelog-multiverse-heliophysics-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d26b7c4b39b23830057045d4ac69e6039758294f45b8f6197cf5f5af279e466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189752 Malicious code in supercluster-vortex-blackhole-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a840cb750914a2d75e4627c09a5d65fdf3f78ccd08344dfc9f366053fad4d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189820 Malicious code in tau-mu-good-beta-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffc911728d84781a700b5b9e706f5e42e1d50b3a29e8c8141b254da2aa124f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188310 Malicious code in node-config-private-zenobia-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c726f498d965d5ca0aa4bf03817a0858351167b13332a7cedf47df996d3a0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-css-loader-restart-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71cc33249cf2dbd5db35e33047b6953ad257e29a19278529523291fbffb2ed6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dc41825423bc5155475bc6a3498a50d19fb4da5da6639d46d057ffe04d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182097 Malicious code in gocay-guga-visagoihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0047ebad62628afc662020c2244ad4bf5b402a62000defcebc9ee0f2aab59a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182491 Malicious code in imodiov-ofi-cafacevavmolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed81abfd2ccb471c8b0d052fcf1945e3f8fa4264c938dee03ef2f445e3d840a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185344 Malicious code in unise-kit-bograida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8407299fc7f1eafdaf7d3e14d8942d36fc6a951270d72b9ad1839e9e2d0c084d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182702 Malicious code in inda-fodja-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9aaa1d1c244d977d1e3a8d77525477eaab96e46cf4c30d16c2a638dca4c7c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185224 Malicious code in soniec-kat-f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38093b22b554579375bd8bd0b902dda937ef3040d1a26e960c529d8961871cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoycab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a061400c6479097e8768ce18447a2cb6188be5bfe8794aa7ac7d75b10a88ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcfea0a4c0f8a5861e494bc6d94770fca281600d82d8faf70168c595be84ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182728 Malicious code in inda-foi-gisagaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e954cbd4646a952a2ca4ca012eec3e5dd40f74a1427ad59660314572b500394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182545 Malicious code in imuay-agig-iucaufg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4dc75126b92ebe904fc3ed5d44459ea678d0448671578e9b5f54089a4693cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183874 Malicious code in masv-ilmo-ciba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024978176110ac7298ba3974ae2444e88c26a70771b40b794c04559470e0e595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185251 Malicious code in tuis-kjt-garfuaavdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3880a13c370b1264399daeae173a39a5e80a31e08c465cad54d80f60b9460c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184200 Malicious code in modasiv-kulvu-baiucaufuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277ca2fc13fd7f64dc4a01bddbe776b8789cee55796aa8389ea47ac89b7cf7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjinhtew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3fcefd042caf68a4b1112755d2d83608d50b89e71c6e40acac5b261abed63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...