MAL-2025-190180 Malicious code in void-grus-superagent-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a8a9fd08defaff05f5feabf694f5b971ed1904512ea95cf7ae5be645b34d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189480 Malicious code in short-encrypt-root-visualize-visualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdabb259765a3cb3fccffff07405833bdb2511ebd0f4bc5940844e0867525209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188599 Malicious code in pegasus-nightwatch-andromeda-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456007ea7c3c7aa65a04e3206fa87137b64b1fb64e3134e83f1cae387acbc74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185466 Malicious code in antares-iota-mysql-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b745a215730f800ab23e41a575eb14af8482a22bb5b1a6db13350db681a93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185764 Malicious code in bellatrix-bunyan-neptune-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce65e5c0135f57c3166ec660e1cd8880b62f46a712458d94ef70acb875d1c3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187370 Malicious code in hot-float-moon-unix-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc7cfe0783332584e55e88a0d036771aba6155e5b13fad52b4a4dbaf2311663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187437 Malicious code in import-omega-long-cloud-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ef12eb1f77e3a9297d64051d6f96214b0bc858f070a63bfce67924055b48f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188327 Malicious code in nodejs-oberon-ignite-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e482bde61fb3e85e4f0ddaf6dbd2bc2b7e66e9546b44fb6bde77934921f5482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48cd42be9a2a6be3b8e905ae225912535c292dc4b693ff78a5278eacad6bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186656 Malicious code in dynamo-schema-higgs-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea29699a4255f978ebc4feb2e45e81710950a299da4f1af155fa329cbc775c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183028 Malicious code in itale-dci-rshauyfyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cace7f739ce3d0ac2595cc5cd1070ac2731b11b8608e7ac5667d597e44dc62ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184486 Malicious code in moki-luni-huojakiavugim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5234a4f70088802541d2712233078e3f8e610d790f1d4cad5ff036cead5e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184302 Malicious code in modiov-kifni-ufavcseqinsdxaoycurptv-auban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0805781d4528c49381044778068a603eaae9430f88ecdd3368848086ab6660ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181953 Malicious code in flights-inlutag-idosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcadc78bc14254dbd719e8325c15697c0c420fff875055d7bca01dbb869d608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184336 Malicious code in modiov-kifni-ufbaceuiacfovafjox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295a81bee1f92c5f6af5c5374f0e244c591c86dcf14c333eaec3bda3357c266a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956a6ce111cd179b1125df1db5b18167952cbc5b12e40af8f1889739e0f38aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9109c8836804b1bcef6dd1072e331efd74ee6cfa9ec617793cf88ce72e7b2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kajcip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf8cfb16ca24ad1a638873981ad36c43cc153f29107dcd3483c20f197b2e2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180598 Malicious code in teate-thy-sonic-kibkac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789222f296643ee65bac055ed08cc01b84c0d7f51de46722308406e620a66d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180418 Malicious code in teate-thy-sonic-gesa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaec40493ed5a01bf3a596871db1ee0d06987d734fe541b684e229267f34538f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...