MAL-2025-186518 Malicious code in deimos-phoenix-impulse-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbfcd766b1ca1c62a132b5ea15ea096166acfd3fa7ec76d70d8f3145d6f817a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185599 Malicious code in astroinformatics-accretion-dysonswarm-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf69323bf479cc5874cafcc0077c2229dd31319e197f5222ed445892ce4d910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189262 Malicious code in rocket-package-sass-loader-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67124e33ba64b1c42f833fc39b6ff0beafc787ffff39c5b660e68a4b0a509dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187732 Malicious code in leda-gemini-saturnology-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f5b569b71df46bf686285180ffd3ef0e011173804742d78524bd68db8bc38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186537 Malicious code in dendrochronology-colors-cosmos-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c58b497bfa810639e7f04a95d1dfdce0066084759d6a3d71419afa81f4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bograttipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8992c24471b013c309218af3a24dda0509345d27707497ca3d7302c37e89045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadoaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687be00d2db79608fa31eae731e45b5e0335d018fcb877fa1ed487b526479a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikif-dakilam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95fadb778c69a62261edab22d317781495743f67a37080052b636108b466ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgustet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544c78325a060ad3c3a1a02da609c4db2b053cd0692c8447ff70df3a4c417e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudafgoacvsigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7c9a72437d68919e1ccbe51ccfad57b3ca03a97a9a801d29ccf285a8c35aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07211e083ea0fae208cb99c6313b760d9d02f00008518212b4e0fd4e484da6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabbamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc69f9a615f06a1736629eff2fc029002b3eb2a54e46cbc06ac8f471c33db0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ecd762052c83b2a90d8745a329c06aabe226b57af566b57813ad3fee933065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182422 Malicious code in imodiov-kufni-acumnacffgteafs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27d560715011d7a16c1325df8f1cf48a16ad26b73c57c47b9bab2674313867c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184345 Malicious code in modiov-kifuni-ufbaceuiacfovadfhjodmux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bf1c392b7d6f1b99604f37791fccdb16096401e4dee04a731928a478bbf8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182216 Malicious code in gociy-ng-ugufug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83947443d80ea08d8744813bfbeb4ed665a5b9369739b4d21b72a918ff31f9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185068 Malicious code in sonic-kots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c68c5af1d045eb717b17918fae36cc8c2502237e0ddd9a7f037925477fb988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183219 Malicious code in kisut-difg-dig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba6ee5ee484d0105d26a2b4071e96eb8bd7b6833b77b8b0b0c5a30c7f695e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184894 Malicious code in sonic-jos-afafiofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35195bf589359995435b89f1b92b5008dd9b9ba7f1b8cb6153c27771960bfb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...