MAL-2025-185907 Malicious code in brane-kardashevscale-coronalmassejection-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d78059d5443582ab6158f56cc1d43c50c6eedf26fad4a962657ce841e070eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188733 Malicious code in planetology-biogeochemistry-areology-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ea2cdad2ea28eee97d50e39769c35265556f86264f39d84627c958c5f00616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187777 Malicious code in library-dotenv-safe-gridsome-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015ef35070afb3d62e79edffcfc89b48d4d0856e6ce0ffcb8848971476865a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189584 Malicious code in solarnebula-browserify-lightyear-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0114a2c36dc9ade148440482f25df3f599403a605d2438cde49dd242f702b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186984 Malicious code in finally-notify-table-orchestrate-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d4ecfd3ec9e536b6f5c276f6a533ced1d24590a4a00d5d059c241e6c2fd05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189129 Malicious code in registry-quark-barnard-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be35985da5091690aa56f84416af345aa641a6b98c78446a0a03f371a4176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-uglify-cluster-string-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9357c297db533d262818f4d94e063b4ca7a1de545294cd6a542cd3cfd595d937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187919 Malicious code in mantle-galaxy-vuetify-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d095cf3f4227e38f0e854fa3861543aa352678e355ebee87d347cda3e374fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189962 Malicious code in transform-carpo-charon-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9df721a1d001a47a01827b2556b96ff9d55853def17552c84f1c6e05a3172c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189971 Malicious code in transhumanism-auriga-markdownlint-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ca6b14f6e0c18b868134377c560103624d5e12334780667f4b5e1ff6661ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojakiavuggijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebae8d231bdab2d563d6ecc7ab40bbb8c42b5379279479fd96303d266e411f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-go (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7ca5488efb8fdfea31367f059a6a57f749a6ec24b04b28b5683d8d808ed19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbf5de018164a3e9c96eb8f51d62e077b58e66f5f2808895056c3224ad8cd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lamokoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745f4f8e0841b9ece9530aca36763c3c2d14433705b2cfdfc02dffeaea0b8fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dc41825423bc5155475bc6a3498a50d19fb4da5da6639d46d057ffe04d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09c80833ac37176a712b969d634df72916b7008859443b2a1025cae88c31d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuiaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a00cf3750f52b5ca62ee4e9b54036426066b0ce455cf55de5e488206deeab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obos-bimabaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da80dfc6a0240a4247a11b4af4b5d356c8211e21ba77d8913d13cf0554b153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53890a966b324c94532d0d4d4bda7de02cc717eca2172f260c912b79f0ca9bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-ibifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31379a469ebfc09f8110ece98c134a8a97ee8f2d81ac73a4765624a15196cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...