MAL-2025-189245 Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188650 Malicious code in phenomic-avior-greatfilter-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b201e815b3fed6dff5cf2c8c8dd8e975795b4c086f7ae845825da2bd13da55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187627 Malicious code in json-protractor-nestjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9e51fb2a7e3a96397a4f164c00e4a75d72efd329525fe13fc14a9c7ef50102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188750 Malicious code in plutology-async-firebase-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2667b86e0f97fb1eedd19856990d65bd90d58cdef8d25af11e31617b84d717d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190442 Malicious code in yonder-webdriverio-lynx-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbb715d4acf64ade15a47fd3c5a01c86a6a1ba2777dc7bb8b003d084a247a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187719 Malicious code in lacerta-chalk-ini-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45cf21208b56ae1d0da3be8ce48b148ac7f6247e8b2ee4ddf53e45b162060b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189003 Malicious code in quantum-node-config-quito-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ed6e82e1cf063a8b078b03ac2d1d9345c6a79f7c0766fc60a9d447ce04dc17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187259 Malicious code in hadron-pino-pretty-hermes-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7736f6786b89ecd00050315e30fc0bdf0f69210e399f441ad491be82bcdbf870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186531 Malicious code in delphinus-vuepress-antares-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf0668bcdb957f83f8e10040b7ab393c0cb92bdc061a5e437566c48e7481c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9079b408c8588105c56db9d5b6f660fd8dd844abd6ad448e4620f9c83670e7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakniaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd1f92f351f06aea66b75523850695d96d107fb7c6391c61324e23625ef997a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-diugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c571bc04a0c0fed293083853cd0df569946c384eedfc87a36c49210495c0664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-niluva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea15ad30452b9fa1f4f63a757019ccb7231e5a9801a6e1755e98d57e34fded3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduliabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e467bbb3940a4f0095ebf0cabdd21f5d09d813a102a69c8352fa087efc2158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-adifagilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e48fd337bf45cdc7ff3c5b1ddf8fc751ddf90028c1139f8cb664b135d66b200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaedaeaefedeadedefredasfgeaffaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9e791a106d60102440cd74d645256df58aadad7c030a275d4d9b33d6e30729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefedeefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31b080c5f17f8a5206676826b82a1a8efbe23ded4b8514a43482670744bf5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuaucdocavgigl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa6c1f258883815f6fd993d0b8e487424db23cef97128aa9bc89a8571007f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cwimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae055425a99dfba27d814fea570ca7272df9a52298385c10929fc126b6a2a244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoetfamolcaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094ddc21a92790ad58acd3dde08a720c063a1f7fa2d06638d36d8ea7f6ce22ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...