MAL-2025-190434 Malicious code in yildun-mesosphere-redis-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e148044bad285322ab507ed67690451ac9bc1bb36c8181d0ba9aae18b6d91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189776 Malicious code in superposition-unuk-spectroscopy-borealis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447a420e2f7492d5062a141b6b5f5bf8ca06267753ff8c144ff4da6937865934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189798 Malicious code in tachyon-lacerta-relay-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8741edebad7eec01082ae61ad292f9f73ed7148cb75ac77435d0c139d964f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188366 Malicious code in nu-interpret-container-grep-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fcf0f0b56c9bcce303f3f0b00cd434d5f276b06967ac7541976361325bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186347 Malicious code in cosmochemistry-less-enceladus-eigenstate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65cf885eb0da593f6adfe75d1539a0790e95b46c28f22988b577a13ef6c3b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187542 Malicious code in iota-release-it-stream-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa57807101bbccb1ed65d8bbde73a1aec0b5c86283b35a5d44a29439362fb73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-zero-rain-daemon-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984383ede6b7df3654a9bbed20b7f0f7249154ddf4189b3a50c1431af44918d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tectonophysics-pegasus-neuromorphic-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5260fad6a008f7b1ade8ed6226e0a569863730d3a911516ecc1888f7d5740747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-tectonophysics-tectonic-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5057ea202561573b6290c79b0741086268a54ece3f76e1906e5ede4e3511d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-semantic-ui-init-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd9e5c43cd91768bb1e1d176eba1c1544754be3fbe8355a892cc84adb8667e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-eleventy-io-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba874897fdcaf548e9b7fbdb00270ec5ea6feb9cb237f6dcb0946a480910f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-relay-tethys-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af189cd49609d81bc49a9a98f3374b67f49d0ca9a23076795f45d4ac631782e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-polaris-json-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b30bf02b8ab08397ef907793ad4f30bed9073496e1c9a9008a9455e4d891f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in execute-java-short-cluster-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0078f37af1918262289019391ff05bf9d93d02c69489efe7d3c4cd18bc998f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-cosmos-mutation-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5dcd12fa5035265d7d32f99a552f3818f4eb9981fd531d05e5b06531dddd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-abstract-optimize-view-rain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb70db1790bb65e64e2974752452b944ac058868f9967bdcf6799ccfa1ced5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-pegasus-interstellarmedium-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b04eb1d5d63c9f3aabf811cac6a6ce9455d32889b996253d4c4aad321324328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whitedwarf-fomalhaut-nodemon-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485383a1d4793fa4e99c507b8c6475dfc9bc9e56e6433a5eb09c6255405a640d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-triton-avior-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e452f33f4d946135197dd190e23dc7ccad92501decc88c03373713cb28a1fcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psi-sudo-key-simulate-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee62d1636d2e3ede1d70eea831e93d894b9e64f3fdca81500b89f12f6071f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...