MAL-2025-189991 Malicious code in tree-awk-notify-beta-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a4475634ccb865c954dd93557022a7dd70e0549691c1cc71b59d788988cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187873 Malicious code in luminescence-chai-cryonics-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989540b879fb299e0397665529c72e3ce6741ea1e975f756eb06854b13707b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188467 Malicious code in orbit-luna-indus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9d865a656c770e023fe92f67cb64974da1cbe3fb0141834bfffd8c86df97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186755 Malicious code in enif-zooarchaeology-jovian-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12bfde11491b202a9ef0e7d59f6c037b33c4a718db17f3028ae3c1c5a5ed5e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188121 Malicious code in moon-omicron-stub-long-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615d1c6d7ad392f76870b9ba5fe3083a43808be1d4132f9f98bc7b60221d1ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186200 Malicious code in cold-mock-daemon-hash-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f437050931da1ccc18f821dfc28616294223dbf7bd3e3d7911b9d4d45878ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187336 Malicious code in hercules-fermion-hyperion-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732d75f6cb499379b6843ff19e5384bb058ca83c8c3c88845de8f273a8505aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189853 Malicious code in telesto-neptune-tethys-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60aa630590205ca8b7b9fd1a3f55a9cd33aaba2af30218049c11201e9a43c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188811 Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191ad1021c21de2e4d2aff52918a87b8c01692e87e5d7d02fa1dd71a2f77ed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-daemon-scale-char-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e37c2077cf58874031c4d121630d5f00bd4d5f124d0d37482fc90c95ea8539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-test-rollup-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6148929a592e573d8d4974b55e488857355621d8e6308aabba97db6b5521aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-triton-library-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508d04582683b1a2b69f84330b530a99d086493e9e8e58e18c5c504817462a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-cli-transport-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6ea24fbeeee105ca193a62e5857465b996bac0d4c5b8f72086246e1f61c665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in areology-express-kuiperbelt-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819117857c155692c2a0d41639c5739a13f2e44777fa96cca650d2b82880800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unix-scale-protected-test-fire (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696a986920e12bc1e3cf84d12a5c637dbceadbbaf002d52fab2ca101305fe795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-umbriel-mongoose-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b42f5a2bf812a423565a8afa97eec03ecb98096dfa30fdb3f61353f872d6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-pipe-signal-dog-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973ce0a16ad8d5c1f09490cb1dedb8466884a064e94f7f49ef23438767ebc54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asjustmeteai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488a12e01a7d9cb98b0bfd0c661b0036427ab1ea7bf5bf5c505c75751d268134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supernova-astrochemistry-webpack-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0a97a162095a0ef04e01b4076c2c65caf6fe9f6509d012f347112f447a2040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-pegasus-non-blocking-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14468cf08644b774f382415ed7ea9da2eca47006b532d6e5389e4ad5a9f45130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...