MAL-2025-189135 Malicious code in regulus-nova-resolvers-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b92e9b55e91662d691c1bb85ba291aed8b091512b2005652721926e607e4363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190251 Malicious code in wavefunction-procyon-archaeoastronomy-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d827178311a22de7b56e9e1c381516b8c0e5313a960ee72e8474c15d154b6e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188270 Malicious code in nextjs-stratigraphy-stratigraphy-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b63188f2e4cde710478e23f743034e0ab25624c739497c27f75dbc61212b5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187584 Malicious code in janus-rocket-crust-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d68df4dd0ef3941fc01f5427a525386ddef1adb2f0de27c41bda77a6971c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186846 Malicious code in eslint-plugin-mutation-geomorphology-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac0904819dc58aca2f9b2d22deb2de205f2e302a35166513ba08c2cf0230cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188018 Malicious code in meteor-command-warp-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8178667f4cc481bfbb71a61023a72f4c670447ad57a44be40c3aab68de2cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189674 Malicious code in stratigraphy-archaeogenetics-pino-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8b8215edc8d75314fd70706553211c18d60e357ddd2ba33d98c9aebc7bfc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186441 Malicious code in cygnus-got-nconf-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4cc3cb622a13b0cbc50c9a597f40074fffcb794cc7735f6e63a0046d3db721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186649 Malicious code in duplex-request-astrometry-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2651fe16dc29246ea136b5abe4b863a53fc8361641f4db128a6e69e0911519d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187607 Malicious code in jest-astro-despina-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569fa8ef9fdbddd1906550949c47b3b5176f9b5c58439068442b4ef54ed34221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190104 Malicious code in ursa-comet-cosmogenic-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd11b0b7a1927f924e9836d71f861f050ea05f975ce2f6fb00a09cfe62d5135f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186464 Malicious code in daemon-epsilon-hash-link-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247ea1f9679d0a4af4536122840c9b4be02d663783f7a7a4e4a006907deb9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c69aeebce57ef1db0c7168526e70c925280626bbeda97de6ef52cb8d2fdd746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtauzabidami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1faa7eae8a80f53e67224f65aa28387fc2befa0526bc732713153f6794c6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-tabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8ba1228ccef19f867c58e572b8bd92e4d69db3d4e63d00b4d1c61ef00130c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliuka-tao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817ff275584cdb911180b4c7329427cbc069e506e830644435589612f6b763e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74b8cb6c2b8b495768b47df5b789a591e633d060538585cde342e9d11befb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolifagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e754745533d9e4cc987ce9e44ad4e7fa7033c05e11d2849c01c122c616a7273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nolibamayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7357b08c4f584320afb35c930ff17dda54445fa2d89ba3eef138c68c403e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-ni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e8e15789a5a0dff88f80f7f1dd6f41109058400e70ab154df171453e9e2ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...