MAL-2025-186572 Malicious code in development-antares-xerxes-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4362fc9df795b9d7cd12a02041fd8a23c9956574057cd907b59e60ecca9a9ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189146 Malicious code in reject-await-hash-try-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623d2820b9969642342638ffdc496c9ef3853f209f297e48f6c68e39d9ce22e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190120 Malicious code in user-analyze-uglify-minify-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c94d0917932065156b108cad7f2e61c6306259a6092dc4552f1a12045ad2f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187607 Malicious code in jest-astro-despina-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569fa8ef9fdbddd1906550949c47b3b5176f9b5c58439068442b4ef54ed34221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187777 Malicious code in library-dotenv-safe-gridsome-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015ef35070afb3d62e79edffcfc89b48d4d0856e6ce0ffcb8848971476865a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189328 Malicious code in sails-dotenv-adonis-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa31083ce72f58be06ef61827800200ffc7fb0df078a978047d564620b116b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189670 Malicious code in stop-callback-wezen-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fa92762b57b343fad2ecbf79edc792490f94879bf693116bb44049f18da222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189439 Malicious code in semantic-release-boson-lepton-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb5355d7a6caf4ed4524b31f706aedd024df4b09ee0659e35613815b8d89df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189154 Malicious code in relay-dotenv-chai-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135aac248520c4091ba591b4d2d36a84f16d5f524805d7e46429c91cd4936504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187304 Malicious code in heka-centaurus-nodemon-hydrogeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf4c5450abbd3567bd61e8f6a80976123a5fa4f46e632979d964711833faa7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-aquarius-enceladus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63f3f27fbe339dc4251662e7eff0b53ce4ace803ff7b70b213dcab09c3f72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186344 Malicious code in cosmicweb-sedimentology-ignite-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244a8086b97b3e59695f91b83a0a171f8762ba34756d6ee338d98344eb1b1b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-oliksima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d143737a294dd27bad8cb7779a6788e941c8e753a4138d2b71efddd6c0f2d235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3865280f14ef168d773eb58848523039e8e2490ddaf069998c52e795bb516ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca23e3d874a7c1c2d70e509bddef56c77f9474b34f73754c636a332f6fd5bb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46dc343fea8389cf32e3d6ae79d04aa6b8a29ddb8fc30df91212854ae0ef69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-ca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9554c772099d717b378fb262f85e1c6f3c3b18838b2a1e79b4f2fb00b3d19221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-zilsdssgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f5864683171c981c50fd1de871fa68af818b2778b310d227a182f3c485714d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fd0a659b0aa1aace67f4126f4cf52b890d76af678f9a818ff48049e22bcdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92347916918f56164ae183eb2603fd3163d27cf2d58caa6aac7879824f88797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...