MAL-2025-188693 Malicious code in pi-authenticate-cold-encrypt-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ac2ec191304f45d1b827faa2c4ebc3b52fd5f3ba53ea48a1c5a28dafeae6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186735 Malicious code in enceladus-oortcloud-augmentedreality-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1be6fc81215391cb9e6519837e991bedfbd60da09c93eed5f1cc8fa4dbf37cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185740 Malicious code in bad-transpile-xml-signal-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b31e71ed2a6d4bf88c6076c957111d72558e44d36bf8a63e906f6074f9624f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188319 Malicious code in node-sass-luna-ora-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760a0317286196c791ed9fd5a105054c79342763e4acf1b914847ae4895dfc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186703 Malicious code in electron-pm2-toml-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39fb8a9d75395b1785a187dc32fd7123d42ea214d0d3cd4f9526ff421b0a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190146 Malicious code in version-virtualreality-scorpius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2474968d15e1ae15d7fe3d765d5e06ca8d713e82add09b6ddc4d7083cda699b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190451 Malicious code in zenobia-grus-readable-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7f6afeae699f004a49669c40ec942ea5468412b503aebc4ef6a6dd68995578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187277 Malicious code in hapi-prosthetics-thermochronology-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945b57156407a7defb56a483e3d506c0a307663ac840d78caefe669db00c55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186393 Malicious code in cryonics-cypress-stream-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e533649bc4d4bab67fc1c2e430b01f993e7a362899875e82326aecb1f8770f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188903 Malicious code in protractor-wezen-repository-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5572cbba6910aff31d33872e7ebb22412069d2c898fa10089c3aa097cce407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186811 Malicious code in eridanus-paleoceanography-blitz-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0760eec369a6a11d2cab8c3756d2a182fb378a1df24edce74a41659dbbafc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189564 Malicious code in sociobiology-radiometric-relay-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45a0cb4544585045819b6d85c347bea35b81bd249d8c80c711911c1321c1ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgahgfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2655f7ee67cc735b4e907ddf0c103746c219f5cc83449838e38f1de79ad6bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddc6c65dee1b85a3729add344226cb2ddad682833ec29d7b4c092844ef57bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaffgaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55eabf97fdd3aac34f4386a4aa6fab4454e8f2c305a9be82c3a3702e5a464936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofity-gamni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da47658ac3bc2b4a35a9900e6d9826f9aabdf15232e39892e2263ee9b0c25dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibbafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5105a384a9df580061248819240ed3e132b96b71da929721015eb7457b08e850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183808 Malicious code in masolv-avlo-civbsoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85195e1aa88690d6f168a539e3635f0963eda3fd074d4ee6fce657e85129e846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182107 Malicious code in gocay-uga-agidugafufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f4754a1edf27eb0b3fb7470a6b8886429dfcebd232bfd56230d08f05b77906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184086 Malicious code in mlokok-lfki-afuhiugababanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c628d76da304ebe30bb9dd8ec1d0b24c2b75ff70e2a158f7da868be2708105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...