MAL-2025-186337 Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189415 Malicious code in sedna-nova-readable-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519472d81a3bae325559686848d27604cacef6d3088adabf65c3453988faa0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188139 Malicious code in mui-meissa-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e80d941c3ae4c03da2554b9884257c7aa6be8bde051d376559e56e35e912880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185526 Malicious code in archaeogenetics-semantic-ui-weywot-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d85b60fccb5653a1ef6424b8a8559da59eac331213af2d61e5276efefbec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190214 Malicious code in warn-pi-visualize-catch-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd19017ae32cc4971e46154fbd9e20fc1d6dd2eb27e09eefcee04c2372bf184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185754 Malicious code in baryon-ini-biomimicry-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3513dd31103848bc094a4a190c5ad0a85ff4cb3dc49d6174a5d5e91512ba98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in speleology-pipe-pino-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc12667834e75d07b49fcd90c909c4159cb87514b0d23ee6ae4ae93afb1756b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190422 Malicious code in yaml-cache-sails-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af495e448a44b27ba05a7124ae72a767dbc8c0ee4b614c3f1fe4155da6a49a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-rimraf-buffer-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd7bd0d93981950b7dfc97b285205d98122fbf996356148515702794779a01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-iualimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88692e171857339dc93c86bd79216800d890c399560256a46c148e55ea8b89d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167ba2603e47d42800c574076f405bc601a59b7377615b051a0c3f4169af99fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-aufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1977e69d97b88c5beb3f89fc181ce83abba5f00344ac4d2db755ccdfa049bb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-timexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75de2b7f8dd962910f449e5918ba9947f6d7e8c42fcb1ba9b3e0f00593c276a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nolyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffabe88ea853e27dd95137e27b673a8b05c774186e95205381c63621621c65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c818be5d8a9f0ab002ed67eb41e9de2d8fc7c57f345151ecb9f9684a234bbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182000 Malicious code in flights-lutg-oikd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02929d3fc69117743419629d3d119dfe3d9daf397ce2ac4e96c4bda04ff9d48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaivuavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45a630b9711d98580e03bd3f2471fdbbe0c2077000fc75d466f4b40680bc4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-gioisioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156a084b34fd4f478171e916ed03ca6973ccca5fc35089a2469ba55a8585532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-systrt4tf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c4357db147e0cf23d40e4e42e112fadb8c41b0528c23a5df30915ad082c80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8709e2ac0b6d800feb0b77efe6c09b1fc13adf2c83ad9a3faa4534e5458c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...