MAL-2025-186806 Malicious code in eridanus-darkenergy-blackhole-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5faf542de599bd45bf39586c3db03f9967f089712019cfa42b18511a1522949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185451 Malicious code in analyze-char-fork-theta-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f903f79e67bcfa45a3643c772a60e0e3f7b066020bdb4dbc19eb67e84ea43304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187567 Malicious code in janus-centaurus-mutation-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade06bb69658e6f0d48afa3ad9598c1491c9cff55530ec10a0eb88bdd857857b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cron-rho-analyze-socket-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ccfff0cb2760978774c62072d2c40b1b8f36364183047d5546f5c67d0fa50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190222 Malicious code in warp-hyperion-quasar-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce712bcaa7250178e1c74d3981affc85be58ccdcbbe4747eb57092b766b7c04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185402 Malicious code in air-minify-load-secure-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186631 Malicious code in double-decode-encrypt-cache-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd120085360bd941b6b618bfba167ef9076e6663bd3af7dc247e1b7a6588f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185895 Malicious code in borealis-hercules-ora-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9629f8a43475f540dbda3704d798a24991f7120a96a82ddb110b11d79e356e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189688 Malicious code in stream-sequelize-writable-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdf4cd8fedeb6040c6b2bae5b893aedc5f019fba5512dc35e0ebc2a03cc4b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185608 Malicious code in astrophysics-mesosphere-neptunology-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684bd004536091223ef4c99151f120e9e68cf9d9e4b2583634be658dd965d50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189115 Malicious code in redshift-run-script-chai-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5286f36483bbe7228cd4a81c89c18519248a77be151e2d05f127fcabe320b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187206 Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827a1eab8ee4f7a8518854247fd592f6a76ba721ba6900d144ce9f687b27a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69632ec517bbc21680ab1bab6258aaa3f6ec0ff319071dacd3613c9c37700431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoetfamola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842e6c7197064155ba4796581b7130e1c1e8ab7586b0f1ade39fdc9f2d7287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183782 Malicious code in manu-oyib-givaksisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777d8292df47179a724e8fb7fd4d389458e9dc34c2d3eb0f650e58d48dba0a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183007 Malicious code in itale-dci-rfsfrgdrgtet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a586d58b0af955786cc2e533a5ea1783076a44333ebd9e4e2cee20b76831e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digokiuaiasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a6d69144d7114952ef7c1454e7a122397b80f1ca4e093a13f81d6d383009f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuivavindaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f52f3d798386a33cec4170b083631686a79b069c9b2c9d789ecfd0c5453822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrusyyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190ee04c33090a3cc7210a782cce1d6a8850c11e6ef4e0211fa87201e03bacee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-aoan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bf154c5946019e6b144b54d55e67c4fed573cad4a4b6d095f49cf1a3b2d722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...