MAL-2025-187557 Malicious code in izar-ora-exec-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d17c4563e99682e42e4eae296514441c01b6f64a6c19ecde3adc967d542d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188291 Malicious code in nightwatch-ophiuchus-request-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894e22879845ad696f15e64f90cbac43dcd710f450574a8380386811c09f27d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188613 Malicious code in permission-index-zero-visualize-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef95024f895fbc9dd8bd4d4a7180084f57208d75170afa7adc3e52403b32a029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-fork-andromeda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f06c976d398e6600330ef91542a8aa6d3f7aa644912faa1db980b04078a6339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-uglify-js-fermiparadox-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06dca166a8b4d24c9ce17bffd59e25dd73bad52a682aa28c3d281a6d192b7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-stream-resolvers-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab85b6244e827370c582584b7817241e4471128dc4029387785c58842a80b641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-paleoclimatology-stream-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d619d01df637e0ed08a8b5b8184ba8a98b8c2e150823265edee3ebdfaf9a7c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-pino-pretty-toml-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de7fe32101812542c9d61f65746d8711f4406289bbf2501459507e59bbcb4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-boson-lepton-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb5355d7a6caf4ed4524b31f706aedd024df4b09ee0659e35613815b8d89df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-wavefunction-publish-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dbd476dbd24f90f40965c0167d1e0e9d30a48c5075ce0ffa548800cfeaf17d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-postgres-gammarayburst-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a1e64e2b0e0b1a65d84829700c0635a7eae0f3ffd1ce8631f459fcc27499c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-dorado-farout-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5519ec1d8838352fb2dfff226a2121434fb340e7e6267d41cad435072182acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-computing-eslint-plugin-zephyr-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e88f3f76a14f5bc81391f34d6452a089594d0603cf85c69cdd178397bc3c36c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-algol-nodejs-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8969814a3881645f0614d171a6b2fd22cdba8d525d39f3294b68a498f406e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-string-kinetic-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc2d7a989cc3ab3f0b43d9f5d6a4b66f69e706ee1b91a078f519486d69ce06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radioastronomy-augmentedreality-library-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c96efc804064fee0f10bf6dcc3c961bd9e06f3fb6c814fc03ffc08e9d1c194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-postgres-webdriver-mocha-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecf3fd1d508e4debb89f36a79eb6c7ac29572b4b9404eb582a72f90583c8daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-phoenix-regulus-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d81c361ada3f219c47cdd46b1840251c77fe413829cd1bb0a4c630ac731f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-css-loader-husky-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple-load-info-error-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847a1870fc15c117080113e104ecb50fdca612614cda464bf9845173229fb2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...