MAL-2025-190050 Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188295 Malicious code in nightwatch-server-pino-pretty-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f606edcf51cd59fa77cab6f6134dde8ac83af12b0555d7ec2536fe43ec5b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189898 Malicious code in testcafe-miranda-electron-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6dc56bc034bb1eb4e4b4fd3fc8d7db620ba01d5807f3200c1c40cfe1f26c695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186868 Malicious code in europa-fork-andromeda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f06c976d398e6600330ef91542a8aa6d3f7aa644912faa1db980b04078a6339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189061 Malicious code in radioastronomy-augmentedreality-library-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c96efc804064fee0f10bf6dcc3c961bd9e06f3fb6c814fc03ffc08e9d1c194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188989 Malicious code in pyxis-enif-wasat-borealis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6360d976d2a538b3cac4e6a6de90d4745ca11d9890d84db004a268b40fd52e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187911 Malicious code in magnetar-palynology-uranology-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd8cb005d3b13b23a50a504bd007171a1a10b97495979bb817020abdb259373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188670 Malicious code in phoebe-cosmicweb-meteor-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb63d19ba7cfb57e738cd006c9c4288fd17ceaa3b39d6a4fea1b3b1562678cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185570 Malicious code in array-simple-water-tau-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cc8225a97aed8f4d662ddf94085f9e9c314a50062c44fc92cd45f49a066f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduliabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e467bbb3940a4f0095ebf0cabdd21f5d09d813a102a69c8352fa087efc2158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacamuvaavua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1107467b2e93ba697edd8739c6c16bac6f43e97d0c7827dc254b6229f46064fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185119 Malicious code in sonic-kuig-tnaecav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71fa47a68f595a50fdca45f557fbdb9080e71ceb4fe5c3f057b7f098de9f1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184935 Malicious code in sonic-kas-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496831f1173e1f891085affbaf362424dc416d7b9a02fd4544e117f722bcdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184742 Malicious code in one-kat-fidulafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d7cbb0c415d1ff5ee480d2779b40fb3f9b2c6fca3a57dd0911c4f94da747bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181697 Malicious code in astam-ifut-dabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8424175efbdbd473976c2f8d40e3eef19e45e1cc6fb0dba339e86dcdc3bec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783c93443951833d05e3744db18ee7c67ea409163feb5f3cbfc1ff5b9282ad9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggadafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e266b337ddfc3470a302ab5d938c09b0b497fe9fb32477c92c96cffe9f4d10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c186fcbd763d5b35cbe7eb5aaea4d4df7a4250c207ed4bfd1235e52b8a02faf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefedeefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31b080c5f17f8a5206676826b82a1a8efbe23ded4b8514a43482670744bf5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-uol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67997e1c861252e79bf4a82fe7dcfbbba430c9679aa1b256f248179d281f277f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...