MAL-2025-186745 Malicious code in encrypt-meta-authenticate-log-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b652ac77988fd5095d31173051f104a9282bb6428032f99261ebbee04f6289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186206 Malicious code in colors-paleomagnetism-global-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c366c6bd8a589278cd1a92d3a0ae616ad4906438cfb8e95c8c0715cdb1c6d208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188603 Malicious code in pegasus-quasar-oscillation-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f01e210d092d65bfb2d9e9fd1c8b58ae91f7c2b576e31263551297da6ad93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-phi-public-info-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0666a30a9d5cca0651eed7ac628009b339a858e95f59355d7862e59a46c62cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-tachyon-apollo-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5808e78b34136ebba63563f7cd291a9023ea14a6a89294689d6a76ff25855793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-quasar-exoplanetology-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d853869d6ef8c38411ec721393742c67d73caadbb634ea41152b4f4b9f1c4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187005 Malicious code in fomalhaut-nashira-webdriverio-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a034cd14a877e2c5d7412544ed3aa5a725a051aa47414ff2e337b9637217fcd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185671 Malicious code in authenticate-scale-analyze-book-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d038c7d079b519f31ce6b09657db6765d1d0007fe0b8bd295d08d7806e81e80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186004 Malicious code in carina-telesto-taurus-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d6f0ea86b084adb8b06876f51ec67386e9c0909ef0c64ef6d102bb502980a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zooarchaeology-mocha-markdown-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f7d5b9e7d646335b98b3484b258cbd866c1a4bebb4a13bd382f0b097d0be63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glaciology-nconf-eslint-plugin-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd9bb4030c257a4e22a70c445b7bbec7d468e091211d5f691bb80ea288ee8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-selenium-xanadu-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf8b961eeba9da8ef4f127b78faa308dd817dfdaa64410081587bb7108e7317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in class-secure-function-transpile-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e28b11cbe99b65195c5c3d27c542888f775612a52a9dec629226c3caaf70c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whitedwarf-meissa-standard-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12016985bcfbeb9b567e3b4dd9080f0f3918ebd691305456490eff90d30c35ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-geoarchaeology-mutation-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ee4d207302be939457bba8282eadfa6cedbbfd6ef02bc6f279847b956f4f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hot-awk-authorize-float-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df4235ff8db5bad46f5f2c4d44b8dab9433e8757e02f1464f1d3f48a4707c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoclimatology-eventhoriz-areology-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69773d9a5c3889d618b425370e12b0c6366104d947651f8e479e7215d1ddd1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-equinox-fomalhaut-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c0cb4105562e09ca2de2cdc72d2a0eeab9560bb0757df8a660d78b0f9c5759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-proxima-isostasy-archaeometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac93addf5705ec6be9762a965b872ca031400f21168925e440d5142383746b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-planckscale-prettier-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fca005387f6cae31e007b8f9b1d5e146cfcca77b5b5758630e77c134eed57fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...