MAL-2025-190345 Malicious code in wormhole-passport-norma-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83cbcbb4ec803511eef9b4bcd4ae8c312cea6bbd76fce98f3301f4509618457c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187628 Malicious code in json-stream-aquarius-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66572cd8192992ce672eff5d89b4844980b864c0c831f139d85634cab429b063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190029 Malicious code in uglify-zeta-tree-delta-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2a9aea8eab50320c779880a7b814aebf214304d7a582738f948d6c44cf0d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186041 Malicious code in celeste-archaeoastronomy-despina-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c86b174fa7f441665264408c849b5a246c6da4cd40a9e62d57bbf70b68a32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-yonder-magellan-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09c161d13a9317bce131ea8b042245be5a5099a41b500fb7888eaf18d11e708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-superagent-eridanus-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066dc6b85c08093514728ad74577e54a20edffbcf7d838638c2e8ccbdc1dfd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-volcanology-cassini-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7589b6b476a0d49718b7677648fafc99e80a2deff34cd47f56d644c1346d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-mensa-hadron-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcad2a61b3271f09a9c91abfbe32624703525efb013fae44597034ae04873bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-hermes-callisto-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b633dc83b81fa2bf2811bca79ee36d4afe31a1d5a5ca8d3cb8a5bf01364c7dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phi-secure-deploy-air-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc13f51e75a048ac88b7a6957de8320f60bd9b1e5993580feb537cf2c5e7abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enum-report-char-rho-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fe47f9adba20f092284e704a6a5619427390e0fff83d48dab8122cbd9ecac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-local-biotechnology-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9231156a824bb7cc0a68e0cebf262d6d2457c813ae5b4c9f8b5ecb2229089b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186020 Malicious code in castor-callisto-miranda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642a0e3b58478b1752d42ebe06e3728a14dd0d553d9e35c2c8bf429b0d2670e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187452 Malicious code in index-grid-unix-long-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd6010b07fa983c3e40a12dd19c6d425704d8d363446d1557f67e28cbcc8d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187810 Malicious code in lint-nuxtjs-babel-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8611eb2223c19e3229ffc9e93992299b19a837631cc58ec018759f33681b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185487 Malicious code in apex-aurora-xml-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7d0a68560ea990b728310621a54435d29f21a74d08f8126b4956b41fc0234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185572 Malicious code in array-upsilon-decrypt-container-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6f1b2f78f3859c8fbba7480af773e3a640b776964115dd51de4ac13b754554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188013 Malicious code in meteor-bionics-schema-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de16c695f4b26dcedf1f8fe7b76d18b9c5022baaddaf23ddd0024dd05f8917ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185857 Malicious code in blitz-ganymede-aether-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b181543731aae6a400de37b08c10308d7f1e0194a3a51b57d03ae970a4c1feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188940 Malicious code in public-mechatronics-polaris-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716464a4c535cdead2933258ca6f1d745693f5efced69bb34dec1ce417342f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...