MAL-2025-189565 Malicious code in socket-decrypt-tau-big-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849529486d9d0d589a18e25c834f7a59aeec5d0fbfd60317298188a31ea6ec62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186386 Malicious code in cross-env-singularity-europa-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff3602c31a1c627dba4e6eaa8d920964d7902b51de88538778b11058f2f032b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190077 Malicious code in update-leda-ora-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e252313c23c3c5509c627db3eebcfc9456566db411c0497086f9794cb39f2fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185486 Malicious code in apex-archaeometry-darkenergy-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17fbf29c20953f8765d3fb38fa3766d60cd3a81a9145f69bac1fe07e0fc616e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186774 Malicious code in envconfig-passport-charon-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a913dba1da1b938c98f9b6be2e6a3d983d34324af40a2987f86fdc7232dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187172 Malicious code in glaciology-nconf-eslint-plugin-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd9bb4030c257a4e22a70c445b7bbec7d468e091211d5f691bb80ea288ee8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185647 Malicious code in augmentedreality-version-wavefunction-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2503586da8fb0802fa3367acc3e22e67b9d508d0ea7d14123f3ec4edda2e8203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-mensa-hadron-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcad2a61b3271f09a9c91abfbe32624703525efb013fae44597034ae04873bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chi-bad-deserialize-throw-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7744577c30322c4063fbd7470570b5feabfbb14f54d2d449b1e66ddae61733f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in borealis-rigel-string-exoplanetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f2dbdab2e1ba4e40caa517bb65a8334df15b1ced872d929a3e379178347ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-ophiuchus-nightwatch-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba27e4f5b3d57611c6d0e1ecf3f14d9701ca0ad6538ae85a957e50d83d071b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-command-aquarius-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b97a5b24e9f1c261d1603afc2a38bfe2203106a11ea4b09ee3b7341b64025b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cat-encrypt-export-kappa-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea3a80ba0634c641c50b6e67efa33dda6b535ae841b7c9bf507af2cd81edff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-holography-buffer-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d383994bcfc1920bdeb6c04e589f3d6540567ed0a712462a7b20166940e06e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69657448b3b6a02182e970bfbecadf73fe036e1a80d496d9efe2ead57291f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-parcel-gravity-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7c77592ddbb2a0c217090e29a01954c5a286d43b507212a97f05b41da1e3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-juno-telesto-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bae7e16402e2f9c25bdb4393c7c91edbd242e3766f9626e46b527e7e400a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xi-grid-module-sed-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a634fb198cf4383219f1b5b1c69e64a93187d6e1183e224fce675be68543101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-tachyon-rocket-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87105f7a55705922e8228e6ee258afe22d3eafa3dd23c68fa837dfbbac199b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-buffer-titan-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792938793257953f6b2ebb196fc67715e7747e88d7f1d9dd52ccf05b0acb5b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...