Malicious code in small-analyze-theta-signal-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4ba72a4e397a3deaa3cbad87c2fedeed49d4e7b21b42d23db36723b016477d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-husky-sqlite-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90045f94e1d9d66252d467fa18357ac19aac151e5ea708173e4ac15adc8779ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supercluster-vega-ceres-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60cb3d1a52c671cd3eef17746e2ab0fefaecdac1fae0661779f46f570219be67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-middleware-proxima-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbf4552596ae5fa6dd65d248b8c6308deae5517bbecc016d04d16fde823a4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-volcanology-eslint-plugin-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a823292dfa1cb7048c8d436418ff0a75354f1851e8773851776ba8f6a0c2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186383 Malicious code in cross-env-geochemistry-global-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e07fddec6b4d867cf834c4f7492dbf165ce6c36307b01ccff40a7cf2c89ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189038 Malicious code in quasarjet-umbriel-global-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5107d252300ac72e77d3226682a2382d559b0e1b387c3fc03169b328d0195ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175464

Malicious code in xo-quasarjet-publish-npm npm...

MAL-2025-186047 Malicious code in centauri-lacerta-config-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3805c39bc995bedc2c84b0d6740aacee5cef37f733218138e2748a3c8e387a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188123 Malicious code in moon-unix-meta-process-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432d18ccf99d5d85dffa21aae798b7ec0ce7b7df8d0070f8e8d4c477f92b2037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188358 Malicious code in nova-sagitta-pegasus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba21826bf8441b5f8669b89056183151cc9cc9795e5a3f9d08c1ba1adc2ff4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaguaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887a42128393e253ef986b9d47a210f859641920b75c60734d5be5960fab1049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aaf0697d2584cf37b686e1d0e0a2fe564f79758c494df6b6638ddf362fdd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifukilsit-daiusikiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf28f2ee92a5cd7647e24857fc550c123aae16e26e93ece7c812e93109080e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182163 Malicious code in gociay-ung-fug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c6b9d42e2d022cfa4f320d57561bfbe1c92972db32eaa526d07e1e03b2d197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181665 Malicious code in astam-ift-dabualiukabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de57f720e506edd5d797abf4b821349e46295efc27d6e34ca679dc991314e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182075 Malicious code in flights-tuiga-alukza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae78f3017f1d48e680d47a29bb4fb6f3dbbe20742ee0b8aac53189fb838a44f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181318 Malicious code in @akunsansan0/kopi3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b2fe61149882e9b2742be60f115634d6ae7fcf17bf26f5e8bd634bafc06b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-osara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2446873d99a69280cc753bf92d4f2f15bc819e32f93b06370320cc227f645e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-aheku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b120825362520b0afc60e5fa65bd00e21dc1ee37176c0e328389438a198fb2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...