MAL-2025-189860 Malicious code in telesto-vulcan-chai-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2c62ca99c0ece84c5f61317c8a3488fb6ab06077078722559423d5b60b63cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189308 Malicious code in sadr-proxima-uninstall-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae035b667df2da489c93555d27bdb3a7cfe04311fe176852f8da12f8278923c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188483 Malicious code in oscillation-grunt-magellan-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd14a9cfb0412ff331fb4db228750a5bd7779ced3a892c4048366316c2786fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189387 Malicious code in scripts-hermes-pulsar-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c868f2b930f8cef33f4482af086921d64684fe465c818ac9af2b1f199e0a258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185534 Malicious code in archaeometry-cordelia-capella-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2c8d6a31e349fd295ea6069c1f1bc56f8eba23734d8405f248f309f202a2e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187900 Malicious code in magellan-enif-oauth-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc4c2c8bf18364da4a637c9c2468fd55bb49f379d7c4e4155628de1d3945d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-mesosphere-deneb-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7fe577b56fcae0f18e8a9da6f6515f83d22eb7cf08237af200ee4ca5977f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189043 Malicious code in quick-decode-transpile-array-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789be1eb5319667c7103faae653520c2ac40f78ca9957e497f34f7395845b3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187698 Malicious code in koa-callback-postcss-loader-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da289d643aa3faecaf7175117c401810c7e8057d922808fb551774bc12f9d353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189007 Malicious code in quantum-sirius-spinner-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009730042d0c36541d7a9147c37bc383153c82e0dff8575f0337d20d263c0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adisdfglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55318b3222478a7542a44527df3819db32650456d094f9e653eb2f22ba28e596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafizgantng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e68689ffcd5df0ccd9c052714cd98ee0fd149870271f9cba959a6dedc05312a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-laps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70bc013b814bb39527dadfbda3215f770d72caf832836687257e42d2a2027558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90863871202809f863e22fcff6fafde6e0d34a59b688294784c84ff57f7e4333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-daliunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf9e3c4e090244c0d18b8ff7fa50a09c5f1bf94e05c6f189dac63851f0dcc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-notar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68306d645661f39fa3b3e4062f33dc46b56d3c9216b59f155231498665cf3731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafufiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77068e34e94237a64b817e5c84cbff2d167e2e865d515f7d41fcf615cc3d0a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafuifiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2754226febfbe72f3b3f8d03a73ce426b070c7a4035ee8ba8d1b7aaaf7028202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-ssfres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29dae9d62376035746c8b57804f56d26d5626ec2c4ceb05cfd29da01ec89af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b823a9978fc24e7cdced02302ea5d983e0f0d4d257360a549bd22d2a34b285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...