MAL-2025-189831 Malicious code in taurus-request-hyperion-subduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805221cf5a62588c1c2a9e61e0875d0fc1e09945259c7a29162ba921752675b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186058 Malicious code in centaurus-backend-json-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dea9b73b571b9c8d8e272ee880a099ecc1292ae7297f81817f14529e4d3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-nightwatch-despina-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7336b107d179e0bff64553a286b8968070d2f42a5453b4c4ffc25c5a3be02ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-wormhole-upgrade-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2362721a82c4e9baa81333ad60e9f1b9209cc90e516120447193783b5f4b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186714 Malicious code in element-ui-jabbah-chalk-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3f9316015fa5ef848708130ef54aed0cf418b68094a0778716dae464213509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541d9f2ae859b256fb3d8578c48df0d858a1f1fca17072d9018dfbb8b3c0c6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analyze-key-simple-long-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e514424d8e9ddb35b422455db45cf7ce03fa1751161b423a15bcbc55cdae5583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185971 Malicious code in cache-xenos-regulus-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ec47ff40e5433cc495d8db04882a9a62cd1feb321a80da2c7c82326de4718a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radioastronomy-augmentedreality-library-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c96efc804064fee0f10bf6dcc3c961bd9e06f3fb6c814fc03ffc08e9d1c194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-pino-pretty-toml-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de7fe32101812542c9d61f65746d8711f4406289bbf2501459507e59bbcb4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-lint-typeorm-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e5beb67118d8fdaa1e144cb2556d1c7eb507b684f06c0a99770132a862715b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-elara-europa-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225bb3e548d67feeafaf0b3128b6664fe27c2d00f7626f199697d9775e813e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdf9bba538d14aa966721dbb920ccb418f264306e58cff56c1b8cfd2587d00a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnadeaqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b6e70cabb2d8082fbf7fc8061d42a1e29a9ac8c4f560d2ff420c730aa520e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diwfzcfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80114a249e5aaaf196bc710ee252667d7776c417e99efad81f8a76e7b1620c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfbdyyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7365c375f9f0f739f25d47e5a5d4e4e6e971a5016d82ddae22958cc379c4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokamakuasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4f20841a057b8f5bb2a0f7c3e815f594a07a1c3f49538078b4a0ccd387058d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daicutaaajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddab30a7814fa4518f311d92d0cab99674df9ce469a2ca5547cf7b4ab8295660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-ak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55cf4296f17a024700d1f446ba4e41a33842e49ce832a6bede0b1b0c1c25661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofalifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87a7b0a0c706a910925fd2cc80367422fa6d946dba62248254ed3006c9b9353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...