Malicious code in cold-phi-cloud-cluster-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0e9984087d6fc6265ee22bf94590da86323c7d97b5205d237579d0a5556bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cryonics-blazar-nightwatch-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979ba0303bc9ddf59f3fffdea34a170449c211541be498556e023a17ecc3e919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178897

Malicious code in finally-stack-error-cold-assert npm...

Malicious code in bad-key-short-sudo-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95126115936cadcb064f8ebc6d168464fb327bc7d45149cd0e410f044d9352b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177483

Malicious code in odin-lepton-superagent-uninstall npm...

Malicious code in socket-uglify-notify-assert-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79e32644b78e05c920de11e095dba2ea5f33e39ee8abd5838124522edd0c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178278

Malicious code in jekyll-resolvers-quark-epimetheus npm...

Malicious code in async-kastra-archaeoastronomy-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e414eb0afdd76c0390d3282431a6f56f9f3e4a0fbe0d9e603e669ee3c4c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-fusion-gemini-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab40641c6da304cc6922285105d49ffd9eb14410326e1a5f260efd9270fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178541

Malicious code in hermes-browserify-alphard-greatfilter npm...

Malicious code in subduction-exec-redis-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50aee37e6d03929cdab61b680843806f2fe81f55e49f41e75b37f927111ca3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decrypt-import-info-optimize-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59d67888e31511b979568f205c52f652170fa14821b80328addca5fbf3deb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-link-update-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c565b4c6d9dd5485fafd3fce71a661cbee1ead7dd64f7bb8d20006fbbcbc76e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177000

Malicious code in prompts-terser-webpack-plugin-enceladus-graviton npm...

EUVD-2025-176292

Malicious code in solarnebula-betelgeuse-mui-apollo npm...

Malicious code in sigma-awk-abstract-error-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d501bf3234ac1bd75171ea127e1a4bda1473613eb110a0228aa8c4a668c5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double-file-encode-moon-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10f8c7b46a34fb8cd76f802a955287a6e735d17496a721553248f24725219d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178907

Malicious code in file-decompress-gamma-wind-object npm...

Malicious code in ini-mongodb-got-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038ac6a29d5943f57bfec8a485c48e4adc402bddaa61931f49f1e469f7ef312c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189757 Malicious code in superflare-tectonophysics-less-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1b8da8dc9f41bfa1ba5e27052994c79ef7554a21aa878b14d2a0e3e5b19562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...