MAL-2025-188151 Malicious code in mutation-cladistics-graviton-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b72ad4908dcbef9674d785f529c71aa2981793455c795ac5532487e8fc7328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190043 Malicious code in umbriel-bootstrap-polaris-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c7e22f661b3b8aa6ba56ea19195787c22f7e2c718cb13c4698d74adefd90d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188650 Malicious code in phenomic-avior-greatfilter-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b201e815b3fed6dff5cf2c8c8dd8e975795b4c086f7ae845825da2bd13da55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185439 Malicious code in alphard-fetch-electron-builder-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9630f529c3a2decf0296dc89c233694d4d75a41419bdca5403cc0224582f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185679 Malicious code in authorize-route-signal-grid-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6420ec20f08fe9014278da249056c739b4f40d5559cc32d48f639433ed2f1ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185570 Malicious code in array-simple-water-tau-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cc8225a97aed8f4d662ddf94085f9e9c314a50062c44fc92cd45f49a066f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186913 Malicious code in exoplanetology-link-commitlint-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfcec8783f7472850817c3503803a35451836d28a4f9dfdb5f2a6cddf295c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188007 Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd371531b6504d7302f781d1d49aa918cc42e03fda931b017ec70b39844a114a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189245 Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d628e2c86e45a67038b100ccbb7cfba9c867d685c1ee99c88dc4b841747fe1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufavia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34fa4126df0dd3235f52a217d7693aa03197886498c77162149b5e3e5d00f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jfuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e61a4f3e79ec5759a78db59773e4e8a7eff3a02e6e827444351ab64d832d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dizb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da6e77bb8dc324b3561e8ef022939ce03d19ea9cd36c7989a05822c7daf9512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb0d66cbb2c695b3d0c0a0dd4383ce96503cdcf8473262d9ce478efab9bc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduliabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e467bbb3940a4f0095ebf0cabdd21f5d09d813a102a69c8352fa087efc2158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakniaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd1f92f351f06aea66b75523850695d96d107fb7c6391c61324e23625ef997a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoerocneaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c12c77bac121ba3baefc3b6afb0156c5fde7ebf98e78910c6d8b80bcc26cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d41b3d5644fab1ba36b595de637b58d7f2682208565b51a106deb961937b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3b7104f8420cfe2541e7b9cc03b086b35e52e535eadbd967cd57f0634fd9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibamayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4a5e1cc8e53f27b4ee50de4c015afe45193fc5a85b89d56957b4b15eb81322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...