MAL-2025-189412 Malicious code in sedna-jest-init-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e29146ae9ff359dd96b1cd1b095636278686695d62974a2d5867e6a74edcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187261 Malicious code in hadron-vuetify-astrophysics-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a023aa918b6df89cf02b3fb9cbff1e261dbb97330b127160a907246a48e94bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185731 Malicious code in bad-eta-encrypt-error-signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1430a541231c581ecaecf6111ee0646d539ec2f560fe6401ba786567cbe1eef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186972 Malicious code in filament-tethys-brane-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd79b06d69f04ea8b0388bfa6ca124a65859009529152dcd4cb8413e3089e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186592 Malicious code in docusaurus-callback-abiogenesis-mesosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bd97b8e1ec351f3c30094833234126ca837fa785a420b0c9ef4ae12a84d81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189987 Malicious code in transport-semantic-release-cressida-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad2ed4999afb8ac268ab70d6a37553264610fe139c6861aa22966b3183792fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggadatusafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e86f997fa8810cfddb0a642c421dec94fe2ba3d97e6b36c662d553eee7df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181671 Malicious code in astam-ift-digokmiuaiasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80190fcbb42d9bba039bb68cde055bcc12354bf275f7ccf817a95af3684262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184941 Malicious code in sonic-kas-ahagafujiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845b292470eafc13b0b4b09fc30b37e4bdd96c5beb6974b69ff9f02a14dfec58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183989 Malicious code in mitok-doni-olialobna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f546a2d905e74f501c7602e9828d933adbbfdbb622acafa01211f27ff97c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184190 Malicious code in modaiv-kvu-ibuagoufavydauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3e18a40ae923fbe3c49040521b72160640a3310c665ecd6f6a636f04611817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2190990f78d24bab53fdd71fe410e9a57e7f1c8769a6e9e42fa016d13295d56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afe04151b3e770b1781305800a7094bec6c23699e2d3a1dfe816e9a6fa893db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-daknaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f114a0e13dc53b26a0866ae5456eb75c877103a70e2b7ddda4d75991ad0516cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimamf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64295790962abaccd5794535f5112d5202ecf18bc8c6de122aadd9c694870220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a11b061c1c0126d7a376d4897c36d2d588630694a3022ad3f6a380efb8d010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6b6a4356a19ce2da7cf7030d9d57f07e1c319711f10616ea43165bdc99e6a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c4753507136809e70d169b09afca830c2ea1136b7cfe11c4b1863dce2b6e64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-lapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442cf9b9d9819fd1b22746e0deb7967eaf955d6fce7845db2fd1fc8295204f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduhisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b31c70d46bd76f0e997e469790865ebf9ac8591572d39048e0d42685af3299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...