MAL-2025-186185 Malicious code in cluster-simple-encrypt-cloud-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb15dcdb1ce2a9e8a213a04162dce769a621eea2c8ab50cb889873afd9eab5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186136 Malicious code in chi-iota-decompress-sed-emulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722c23358617dc24a0bd39fe403d9db311fdb4a4fabf6270ff1fac62100a291d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188760 Malicious code in polaris-backend-rollup-asthenosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75e945aecd446f0bba0ce1b9c53ec6e16c4e3159cd012093ef624baa26afa93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185378 Malicious code in accretion-kastra-nightmare-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e97e293861df5ff3ff1aff45ed36a2f258e7725f0c175f8fe5ecd58ecce2f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189146 Malicious code in reject-await-hash-try-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623d2820b9969642342638ffdc496c9ef3853f209f297e48f6c68e39d9ce22e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186960 Malicious code in fetch-ursa-vega-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d636c0752eaa2b5ba9b87b8801329c119b834f1e4a4d5790878fed205c0a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187293 Malicious code in hawkingradiation-jupiter-morgan-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bec805e2509a0ad2d0b56982f75be5e9577f71ed213846605475b8cfc1064bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185783 Malicious code in beta-moon-fast-authorize-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185518 Malicious code in archaeoastronomy-biosignature-phoebe-metabolomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3533df6b043ad28180a290281fdd4efd39807074d439976564c2cd6580cc15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186344 Malicious code in cosmicweb-sedimentology-ignite-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244a8086b97b3e59695f91b83a0a171f8762ba34756d6ee338d98344eb1b1b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190375 Malicious code in xenon-release-it-telesto-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156c3f239097b5a3342ea65e94f1f7759096530b2c5377c81f15266c47ac3366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187797 Malicious code in link-theta-float-class-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0217fbc8ce82958f98e07fb84597a7fb29c01d324de938f4aca90bcef15b747a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46dc343fea8389cf32e3d6ae79d04aa6b8a29ddb8fc30df91212854ae0ef69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-ca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9554c772099d717b378fb262f85e1c6f3c3b18838b2a1e79b4f2fb00b3d19221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-zilsdssgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f5864683171c981c50fd1de871fa68af818b2778b310d227a182f3c485714d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fd0a659b0aa1aace67f4126f4cf52b890d76af678f9a818ff48049e22bcdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92347916918f56164ae183eb2603fd3163d27cf2d58caa6aac7879824f88797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c871d46320533cf44f20ca6345eee76fb7ccc7602d3ef75e794d407e5859c1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ufavcseqinsdadayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4836b986058730b15117c5b5ad9f39fef53ff3ede0471755e40e1e98e4344bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daitajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a952cf9282e23a08ba9ff19ec953ca1b27cfe4abbaca938ea1ae685dc09f47cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...