MAL-2025-185715 Malicious code in axios-neutrino-fomalhaut-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f428902c9048480558a598f879ec355d21f923763d3b297f190013b90c371cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186127 Malicious code in chariklo-dysonswarm-yildun-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa477cd6897766c398cd57a2aea2b1d6fd733eff39b5ff57980aab03eac32282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189329 Malicious code in sails-europa-nextjs-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723695676a287161e3d27b973e94d01b9c7964555c6b08d4112590252c89e581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185858 Malicious code in blitz-hawkingradiation-helmet-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecede92c259914338e21166ea4de409a5c0c2c18f2d9985ecdb8a0aa42964bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188216 Malicious code in neptune-europa-version-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bda02da4b17be35dae8af31f33e45190975dc5b800247dd179363537abfee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187057 Malicious code in function-finally-beta-fast-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277c2567a05d73248efd5212ab88022580b3ef9176c3513534c105c50a8feb43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190348 Malicious code in xanadu-dotenv-safe-markdownlint-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3910fdac95250d53aecadede785513f9beceed180e4330b90a3808d260b82a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186275 Malicious code in config-darkenergy-heliophysics-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3f2a08be0835c663a99803c2a7fa6298b462438acf40f200e42fac09cc218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188229 Malicious code in neptune-sync-holography-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57b68e79022a7960c4c1549b9687a8d747ccc77b49e84f234d1288166c8ca72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187381 Malicious code in html-webpack-plugin-zenobia-nebula-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7c207337434698205e1a554e373872174bfe0253efa98b12e47eb140c345e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rryusyfsytt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe9422c8cdc61a842cfcc9460fb6ab0e381463e8a3da92d6c99fef1dbad4e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaffiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f8eee7671cea3ae583f68f691300257e827b32f51cf5067296eaedc7c84104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-cb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ff4ce23199c1c4dc73fcdf6c53631fac94ae693b26976a71f615ea23f31562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuygfjbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410aace70afc8fcae28b8b90521b82da544d145ffc4585de74bb02ede18352cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiufcagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad9d9361497b4323311ac1d1771cb0def3393b7053afebaad76e413f927f053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgopigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082ff2d66979d0f2b073bc8f2e9812248c01496b1ed3db0a70c2dfec37468b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696e404c1daf42ca7ea9195cf0636ecd76c5da3043dabba1fc7558e1e4965a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihoan-afmcauxabtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037d579bfe30f44cf77187b5e2ae6022111e5141157db23d6175bdf3cbb60962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-bogatipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc88eb5b7b1aa95d8a0e92db93677bab68b39257fbc81981996e09cfe0466f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1cae43d4dc5b4ddb59927447f7d4eda695844206de5b9398beba5a013e1084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...