MAL-2025-188484 Malicious code in oscillation-leda-warp-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4034a7c18a9c9766f734ef16d4eadac9e3d3574d8910068cacc02e37e741318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187112 Malicious code in ganymede-server-test-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d617783d03884b64271ec7efcb054e628005fbdab4733a1866ceff8e38cc8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188233 Malicious code in neptune-venus-foundation-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee152f2d4396ca7e5f7e1a9e8af596f9095773d1fab65f76596fd3bf58c29f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-semantic-ui-cosmochemistry-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324a909713f74f248bbd7d80715356b6ebd5ed9821a32c6b11221859883f0d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-atlas-global-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76c400c13c978ef6cec8cf7e638527ede28cbd33c8bdda65e4c91e8e97c489e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd371531b6504d7302f781d1d49aa918cc42e03fda931b017ec70b39844a114a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c008e0e78c252ad80dc2cdf02ef146655bf01aa8cc20e278fc2892651e7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186021 Malicious code in castor-cosmology-planetology-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0793b946fb175d66296827fcb218b871018110b0a8b6cfd2e04dfd5583e18fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadwadsafeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5389f043271175691ba6f2b0ffefe6bd6dfccf30b7de605e138497e9565df311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182603 Malicious code in imugay-avig-ijimaumfaatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8956b5ea00e74ad1386290bf89e189f4c5c2f97452817cc6e6835a4363d3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183856 Malicious code in masv-ilimo-civuffana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de38566b2dec2293fd9851d7ca7dace9250035144b7d33ccca51cd648a14f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-posel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9799e6a1de7170610018250ea9134846fe4f9bdcd4ce2c71e3962a2c1926fbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179811 Malicious code in lookingan-jaja34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad36dded83e306cf92a68d0a5debca85a8f1b304eb91ef46ad00c22372af8ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogofiggadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ab9a8eecef9fad754593c6a175899ff80ad6078b712cc0f69b523391199aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173755 Malicious code in butry-mutuyyu-maseu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d44c7fd99f5992bb878d691b074cb1cfe008ccc208a72d487325b87364dcfd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175955 Malicious code in mahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca2ee2335f26294114a8a1378d6d8ea5cbe8d480273c9cd6f558d1ed200d7c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178797 Malicious code in tanura-sui-dafunai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2d4924d5ebc989124ba88ed4bb993ab71f870661f5afd14e9d26dca2818ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-du (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b6a06f9bfe2012f94b865a69fb17264f9aa07f8f6ab4bdee80de29b7fe913b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afrri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e873e58dd0d14c85e422b0dc6d370b71d323339f3d48582fedbcc9ea715330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178451 Malicious code in sahu-satmug-fafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc67eb55b86d50266212f15d987eb25946b8156e81c2f678abf6f6244f2ad2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...