MAL-2025-185526 Malicious code in archaeogenetics-semantic-ui-weywot-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d85b60fccb5653a1ef6424b8a8559da59eac331213af2d61e5276efefbec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186337 Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186494 Malicious code in debug-cache-report-cache-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548a5857bd7c92380811c367a8bd3c184e43d7536080c389e556fed63330059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189882 Malicious code in test-fork-gravity-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd155e14b0f3d8707048a509a44689422afdacf2b452915a05a5894bcc2dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-coronalmassejection-lightyear-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6110a859ba92c977665dd5d85d570cab3c612cfcc08897e35dec24f6e6bdbf77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gammarayburst-technocracy-janus-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8fa380896847a4f64365da44abb4d4cb3d6cf76d566109c27ae8b4c3eefff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188749 Malicious code in plutology-ariel-subscription-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7586875995a9248c1bb0d69061389e43a86bfb28b5f8a11e6aef21281d3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190422 Malicious code in yaml-cache-sails-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af495e448a44b27ba05a7124ae72a767dbc8c0ee4b614c3f1fe4155da6a49a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185754 Malicious code in baryon-ini-biomimicry-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3513dd31103848bc094a4a190c5ad0a85ff4cb3dc49d6174a5d5e91512ba98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167ba2603e47d42800c574076f405bc601a59b7377615b051a0c3f4169af99fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nolyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffabe88ea853e27dd95137e27b673a8b05c774186e95205381c63621621c65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c818be5d8a9f0ab002ed67eb41e9de2d8fc7c57f345151ecb9f9684a234bbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaivuavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45a630b9711d98580e03bd3f2471fdbbe0c2077000fc75d466f4b40680bc4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-timexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75de2b7f8dd962910f449e5918ba9947f6d7e8c42fcb1ba9b3e0f00593c276a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181877 Malicious code in avangs-olium-notarsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d116e268b1c090d48c93f0ea2d177937fe63e4ba83717645bfac6ac12ea25c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182000 Malicious code in flights-lutg-oikd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02929d3fc69117743419629d3d119dfe3d9daf397ce2ac4e96c4bda04ff9d48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183628 Malicious code in mahnu-nofy-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f44b504b6bf2f8f71a4689e1cb2ee8bfa3f54ecdcd17265d6bedf2686c8c515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-iualimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88692e171857339dc93c86bd79216800d890c399560256a46c148e55ea8b89d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkusaytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74bbbe2a26043a49e6923ed5378dc6678ad5713aba3ad9a0d527e7198c3b9bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-gioisioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156a084b34fd4f478171e916ed03ca6973ccca5fc35089a2469ba55a8585532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...