MAL-2025-186376 Malicious code in cron-tree-query-unix-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34a183643dd8952a10e6cfa7eadbc3debad2f90787679d22a85f961c815e5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186341 Malicious code in cosmicweb-antares-lithosphere-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506cb2e0e182f936ec1b74d381874e93fb15d69cc3a6e7245f53e539eba8e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189853 Malicious code in telesto-neptune-tethys-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60aa630590205ca8b7b9fd1a3f55a9cd33aaba2af30218049c11201e9a43c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188490 Malicious code in package-changelog-css-loader-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf183518eb8813f78ae38737637f90dad98dce465ad977d4ef42935ed1a8da7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186935 Malicious code in extremophile-slidev-radioastronomy-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caabac9e0f1bd1f9c12cdd709f620e7c1e8d2e0b6ee9f0e3e16f1553227dcede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189317 Malicious code in sagitta-polaris-configstore-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a105ecd8ce1e73138202d04dda63b4869c363dc694a29aa66527412831360b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-halley-terser-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6dfb854cfd17d5b06c05f8223eeb22c789a6217a138f953d0edd5bc0997597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187088 Malicious code in galaxy-cosmology-remark-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba9738f114ab057949e61e21d3c77d487480f1464985e0f8438d20481f0d2ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185747 Malicious code in barnard-kronos-rate-limiter-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11769664e39034a14dc89a223dfcc785d7f01df045143a545feffaf30d8dc5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinuugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1779a1e35ab760e13dd55ccd679c85626120eb231dd87425987949f17c8628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafgrcavaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fcb472cec5586fabb40319a39767fc5eb0dbd07390229f5720b5cc2fdb543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-caa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c127a11669a72e4ec413d0f32f1ff12a72da3a3786e715d2ca768512456b990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in msokidt-avog-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92731012b6a34346fc5ad405c663f2489fd978af459d770f6d3303f64bda6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavufif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aedbaa8b47d9d65c5cc10ee2cc47e22a1bd9d5caf2eb1e6638361db44c54b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f656f467fae61c47e54da832eb593a4f58ef6bbdc9141ec22cbdf752d08a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183757 Malicious code in manu-oyi-gioafisiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a466f743cf2fe8c585c946deeb186f9490d36486852cb535dd5acecd953a764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b98bd63ce5f1b309d6782183d3b539fe56d3f12ddb6441ecd48dc1a7de2c82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644ffef31d064f7c8f8da47da02f49d6bf25921d56bf6926069cb7d1a319c9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadeddfaaef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eaa73a67b443faf4a7497f19231e16251c731c35a620fd7c22af2676d2b5d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183324 Malicious code in libc-ug-agg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b3040d937d433eba8f232cd5531f0cde46a9ee4bf8c4a21e069d3f18f5e18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...