MAL-2025-185599 Malicious code in astroinformatics-accretion-dysonswarm-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf69323bf479cc5874cafcc0077c2229dd31319e197f5222ed445892ce4d910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185582 Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69657448b3b6a02182e970bfbecadf73fe036e1a80d496d9efe2ead57291f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189262 Malicious code in rocket-package-sass-loader-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67124e33ba64b1c42f833fc39b6ff0beafc787ffff39c5b660e68a4b0a509dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187922 Malicious code in markdown-cors-janus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab8745a2c08a63be222f6fec9a081416e65831afc979c6869d1f90457518dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186518 Malicious code in deimos-phoenix-impulse-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbfcd766b1ca1c62a132b5ea15ea096166acfd3fa7ec76d70d8f3145d6f817a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07211e083ea0fae208cb99c6313b760d9d02f00008518212b4e0fd4e484da6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgustet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544c78325a060ad3c3a1a02da609c4db2b053cd0692c8447ff70df3a4c417e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudafgoacvsigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7c9a72437d68919e1ccbe51ccfad57b3ca03a97a9a801d29ccf285a8c35aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bograttipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8992c24471b013c309218af3a24dda0509345d27707497ca3d7302c37e89045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ecd762052c83b2a90d8745a329c06aabe226b57af566b57813ad3fee933065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikif-dakilam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95fadb778c69a62261edab22d317781495743f67a37080052b636108b466ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabbamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc69f9a615f06a1736629eff2fc029002b3eb2a54e46cbc06ac8f471c33db0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183219 Malicious code in kisut-difg-dig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba6ee5ee484d0105d26a2b4071e96eb8bd7b6833b77b8b0b0c5a30c7f695e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadoaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687be00d2db79608fa31eae731e45b5e0335d018fcb877fa1ed487b526479a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184975 Malicious code in sonic-kg-tifuacffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed88920420a3610cb980be501d90deb726b03c8e29bdedab64a062ea3adc7d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184894 Malicious code in sonic-jos-afafiofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35195bf589359995435b89f1b92b5008dd9b9ba7f1b8cb6153c27771960bfb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183341 Malicious code in liobc-ug-afayafuyacauicig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c198a4da33bf993c0a9849903a6c1a7d42b13983b598d3404c4f9624f58d4344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182422 Malicious code in imodiov-kufni-acumnacffgteafs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27d560715011d7a16c1325df8f1cf48a16ad26b73c57c47b9bab2674313867c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185068 Malicious code in sonic-kots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c68c5af1d045eb717b17918fae36cc8c2502237e0ddd9a7f037925477fb988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...