MAL-2025-186360 Malicious code in cosmos-framework-gacrux-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd2a9d5b7263324033c43fd921ffc4f87609c2d056fd9ab0813eb4da595dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189246 Malicious code in rimraf-middleware-mysql-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef86514c1699fce4dff66864f70182aa42254817e8fe3bb9925c667d7d3732e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185546 Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c059255ede275e21e5d68337bb9005b3814fb3f5f7d935ee2d55255bd2a1a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185550 Malicious code in arcturus-sails-version-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d76c3c54e9f426ddd2ebcc682016032c5763ca053724a6c3a88846657649c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189295 Malicious code in run-script-zenith-mantle-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8bc15d6d61c2cf729f00787cca8ae37164f36691b012e1c17ec1cfa919423f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189505 Malicious code in singularitarianism-interferometry-cryovolcano-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1a008cdf498b4338faa36f959e2f1eccbd04ff0bb18ac3f35f4dfe01a15e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186203 Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0400d978fa965e52d12202d981d0a00f84aed877346a6ddbd17443b12575da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185478 Malicious code in antd-node-sass-zenobia-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a6abf162f2ff33e0e531ac0bacacc886441b2faaf429aec9919956afcd7939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186099 Malicious code in chalk-paleoclimatology-dependencies-parsec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a603788e55451e61a0dc7013d27051b497a7a2c3d8bf05f6086ffe0db7090038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-iualimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88692e171857339dc93c86bd79216800d890c399560256a46c148e55ea8b89d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ef4ce4cfb8503732d7b438282d17e82f2419905c4e011cf50294ea71ebcf8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nolyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffabe88ea853e27dd95137e27b673a8b05c774186e95205381c63621621c65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-aufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1977e69d97b88c5beb3f89fc181ce83abba5f00344ac4d2db755ccdfa049bb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-bala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789c11c2218a9e57a138e4ce3a7d3e2daf4e1df40dec9c7c6bb5e402669e8396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gisagaulan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009ddd2aabe022f7a9adbd4312a3ab227787bea603700482463ba43a4d4f20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiuugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbb54ea5246dd56ba7b4bf9aa0f322b771eef6244d3b1c091d0d9fbe6c8b1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8709e2ac0b6d800feb0b77efe6c09b1fc13adf2c83ad9a3faa4534e5458c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537c6defb49052ebcacd66a72fa3c8256df642c5e7945294c70fad98bf07a084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-moic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1fff493bb21b5f8074af9673a67846daf27920131c871d6c6056cfb790e9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182380 Malicious code in imodiov-kufi-cocakmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57038eb96fb5a78c6c5d9e7a282072fc49b1e501b11176e136646f90f5e498c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...