MAL-2025-186393 Malicious code in cryonics-cypress-stream-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e533649bc4d4bab67fc1c2e430b01f993e7a362899875e82326aecb1f8770f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185412 Malicious code in airbnb-tethys-enif-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157c49ba15774f802dfe58ca3f72e5256be68674fdc83c6f875c551e87fe2d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189365 Malicious code in saturnology-titan-solis-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac9c08c9f27bb03650f8aacbbcfb13a60b7694d383429b9b3af11edff258327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185512 Malicious code in aquarius-babel-nconf-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367d06fdbae8de2b7d6bcc68f6b13999fc7160d92484baa01898cb3fd84acfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188371 Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3531082acc33005105cb670ecb9ad95d910561eb968cd85dccd4a71b29b32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189640 Malicious code in stack-compress-nu-zeta-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e67631711d41d02520521df6190627ee39430a578d67183c97e9628a7568b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189141 Malicious code in regulus-xenos-yonder-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b135b3fdeffeb1046ea488a1df925b755f80e5b13d69521ae1c97a1203a438a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190146 Malicious code in version-virtualreality-scorpius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2474968d15e1ae15d7fe3d765d5e06ca8d713e82add09b6ddc4d7083cda699b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189283 Malicious code in root-user-await-validate-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eadca940140bd92565e3b06a732c77498e9eb34e843f9bf2a52c4c46a9edac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187722 Malicious code in lacerta-style-loader-mini-css-extract-plugin-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222914e44e98bf610164e7ab4d3b3240a1bf355716c59e8661864f5d3de0ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188623 Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c5718608669665e65c60caa8f7ae2f05eb9038c1b2a0540f96b584f1ea4dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188567 Malicious code in parsec-barnard-indus-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf67cd6c7d272b18c189b6a696b3683ce668ba0405360dd3850a0a83726854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189457 Malicious code in server-asteroid-foundation-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb40eeabda7ad4308a0ba204f8ac1fc138af675efd1d2031cba0b5d8e8d1279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddc6c65dee1b85a3729add344226cb2ddad682833ec29d7b4c092844ef57bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-iualim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fea4fd78dd3b54e429d00ad10b0d377e2c6ee3b6c934b6097cc1b34cab2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiufuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c0e42ca7ff01b78f4b6910511469397b263d6ff689562d099aa8eab8942ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagaifah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb462c66586c367e7fe5639a99621f4a69a8df103a5401bc440e572579a809d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2356d9e56fb37f149f3502ff33c5c161fdbb221002b2d692a770a3dfe1b0dcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248eed230e4efc313942713dd46334818cd9837d4ed782c4be3bdd5dc1694b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61154565a7182ddfb120ff66de88ca3b80a2af092e315f3961a3c95b2586bd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...