MAL-2025-187766 Malicious code in levels-eris-ora-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396eb7d9acfb07e0b4d45bf71b3a83fb17f984b821fe561d455530ef55d0f946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189359 Malicious code in saturnology-blueshift-parcel-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4ca50082877acc2537bcfeaf9b2c9c124596a3983a4d9613ab7b63760f005f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187146 Malicious code in genomics-lightyear-mesosphere-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1443676fd94c32ffc79df6aede4df75f935ca9d1bc99e7c99bdeb9e440ebdd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189943 Malicious code in toml-airbnb-cosmicsilence-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d44c0c36406daa61d61175a2b7918aa25a02a62761baeac9896e031b80cf96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188135 Malicious code in mui-asthenosphere-callback-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a2d722d630c36391a6462a8aa7ec39781063cf28bea9b925ad28d6e43bd231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186986 Malicious code in finally-validate-spy-transpile-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9042f0ca03575eae11d95191fb56e4a493c9d9cc6f78b44ff5664df90a5eae0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186731 Malicious code in enceladus-eslint-config-readable-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1fc764b9f62908de5e4c0fab8df232ef0a5c42597b41238b24ebeb00866fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190348 Malicious code in xanadu-dotenv-safe-markdownlint-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3910fdac95250d53aecadede785513f9beceed180e4330b90a3808d260b82a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190093 Malicious code in upsilon-fork-pi-index-emulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76974f55a567f0b9b70350fd1ba445bbdfefa6a623c5d9e10626436c7b19827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136888

Malicious code in imuay-avig-iyg npm...

Malicious code in mitali-dan-ujokulia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cb22d315a501d03b10e8adbaebb56ad3c4455a69a9e6796866a8af99e11574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afiand (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240be0af0e774d92ffafd2733140b56f11b7bd4a652a783c51b92c2f2f4550b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136638

Malicious code in inda-fodja-gifaobga npm...

Malicious code in item-atim-ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b69c3dcc16fdf9ee876642a7dde0e74d202652e098c76bf7f4712eb37dd502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138127

Malicious code in avangs-olium-notarsi npm...

Malicious code in odasv-kiuu-bio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7f352cbfa6b238479696887407ef04f03d8cc88f4e355c2b7b925d6e62626b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyhfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f6ac4ed6fa294b92b53af7f1e0d25b2b9a867da788cef4b7aea6755263f0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137667

Malicious code in gociay-uinga-uugfu npm...

EUVD-2025-136618

Malicious code in inda-fodja-guofgogiapa npm...

Malicious code in sonic-koig-tmoerocneaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cfafcbed9f2bc25156cfcede740dd6b5b88901607a534d1cbd40115b2c8d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...