MAL-2025-188712 Malicious code in pino-virtualreality-cluster-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a8a39dede87555b3f9d581416f4d22169c536c9e714a58d22911815b9f289b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190144 Malicious code in version-pyxis-spawn-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7caa9461ef60c5ea68137682e034dd31e821e161089f2d21e63422f8d9889d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186999 Malicious code in float-beta-deploy-star-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c28ea191cc624187c918a5e511152ef7fdd4e559f69dd061a432e823a1547cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187363 Malicious code in hologram-oscillation-config-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94fec5f581224d5aae6e79087d88350c41d0a91a59e1bc1e4fef8e66c48b7c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189225 Malicious code in reveal-md-electron-builder-chalk-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad219c6c13a2f6799e4676b3d3104655eb69ed912f81bfa7f92b9610298c61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187216 Malicious code in gravity-juno-cors-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8097a0705bf1ad76bb1607942f6aa70d99247cce4d60a546977d03b5d6d255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186371 Malicious code in cressida-vortex-lint-staged-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d541b72f12f4ff134a895458ff7ace3372090c5a8033ba0c1df81b2f95297a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189946 Malicious code in toml-ethology-cordelia-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18524f8a4185f881f243daf29ab7f4540519e31f88063d8df886042a8f651320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188304 Malicious code in node-config-commitlint-panspermia-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0aeefef00ffafa72eff5735fa1a8801352c9e4c828d148219678c1b24d15c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186337 Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186756 Malicious code in entanglement-australis-event-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe1daef2ddabff000c930f4c64f389381e92e08eed834fbbb30fe6bb729393f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185707 Malicious code in awk-node-abstract-interpret-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57b94267f695268b2205969adaa9a5ec8130180999c45d34e32b1a23caa7f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185693 Malicious code in await-float-optimize-route-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e098a6f9822425661851047a431e132cc1cb8d102b241a0dd8972f13b4bd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-timea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566b4ee12862576022bd1df5032ba5864d37020187090bf5aec876465d7fe39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafufaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d5bb5180013553d541c1cf34abb0b6cd3047f3175bba6ed78b10f4b870c801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-co (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f4b68274db53f56380fde73727526099d526f767f02cff775409e6f3a78964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudvitifaafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff297d65d751a52138277f3fb88404b45b18f25e3f10c116bc4bfef62f07e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafiofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf497e1a316f7442ed87e243c05e4d1ea3b9bb513815a05aefe937bf26478ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbsgbatrefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff73be90ce1e5761667c93822aafe64892bad658e034a113f40c70b9fcc04ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imailok-ofe-lanauia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2ba9bfc2c91e12cdf590e85762a5fe4d5bab924e752fad5516c902354b4f854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...