MAL-2025-187105 Malicious code in ganymede-meteor-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6caf727d2ca931162dc42199e8135f7c9bc25580dc02019ae90f6876bc9655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189502 Malicious code in simulate-refactor-java-route-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe246c9a319e93da08c8f821deca2d3ec78470ea6b665003d0e4eb5820e6771b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186249 Malicious code in commitlint-config-angular-graphql-ursa-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd57c25c7dc8e5c5e65fec44158bf31a22298db16e48f9ab0afbce4c61fbb2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187340 Malicious code in hercules-winston-janus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662c745f54f81147fa240741e0bd6e9bb86d4b36e48649b5f8c28febba93f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189022 Malicious code in quark-loopback-palynology-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d40ef0f2be07d54e6e36d6b88eb13d24800f9598149a61a58a5a23014e5074d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187835 Malicious code in local-astrobiology-magellan-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a2c2f4a1059031e0a45ea178d7af7eb11800fc2c6f6b0f385b866faf57316f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185807 Malicious code in biogeochemistry-carpo-alphard-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6ae68492781c51e2028c436dc6451385234e8dcd5c0047bca8aba4e03c5e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189836 Malicious code in technocracy-protoplanetarydisk-xanthus-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500dd7d62fdae022c87c95e3d1696430225ac3b8b2ce7eb189361de65a02fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187993 Malicious code in mesosphere-planckscale-quark-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d07423b5f8c97806ef33cd07907b9d3741d1537e90765b5c1d3d325e6bfb04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190093 Malicious code in upsilon-fork-pi-index-emulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76974f55a567f0b9b70350fd1ba445bbdfefa6a623c5d9e10626436c7b19827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emulate-earth-lambda-iota-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ef28b45310e660baece35a53cab9f8cd79a0a7d8211394c43df03cc593fdd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-oli-abar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb3efddba964eea0aba376037d810fca8618592af3f6575874793d7a74016e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jauab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc1d30cfa1e02ad4c3382b2428b9bea1b709288e79762143cfffdb413d1d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-obolduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72519bd44dbdc96d57d71b3b1969bf25dcbfb2daf2772ba5760475c4e4ac2012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afayor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e022bb123117c10c392337bf19e71f805fbcfe63a93c3957a2e416e8b9efb000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f221bc7412471e7ff718bef5da77e89d40c807e9832bb938ed29789c90b0a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifuni-ufbaceuiacfovadfhjodmux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bf1c392b7d6f1b99604f37791fccdb16096401e4dee04a731928a478bbf8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fehjiy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0c34c96a3f5ba606e92a1c8d8a38f9d3426b93fcaa6a12f4475deef5af5879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-timeseyawaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50688a346d036eee7d66a1970c71f3ebe92162c15cee2d4e3b01b265657e8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76694eb9d3d7e264fe4203567c7b6e33889cbb33fbbf262173a9ed2111d9db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...