MAL-2025-188749 Malicious code in plutology-ariel-subscription-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7586875995a9248c1bb0d69061389e43a86bfb28b5f8a11e6aef21281d3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190065 Malicious code in unuk-eris-paleontology-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9329444c67fce09de6e11e7173d8332d45be1f00838ad069f07ca80098b44820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188724 Malicious code in pipe-pino-pretty-toml-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de7fe32101812542c9d61f65746d8711f4406289bbf2501459507e59bbcb4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185563 Malicious code in ariel-virgo-husky-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef531ac98ebdc581568a34a60826b1733fd289987d4b27691c292b8bacf3e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190028 Malicious code in uglify-view-stub-simulate-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddf3dc0821ebba5a3a738773863d28177213852142d69afceff7c2feef8f7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190383 Malicious code in xerxes-auth-jekyll-ionosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ad4f9df284c5088fa33be03291602f134c74a08bde68bd1d24c3220134e5cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185829 Malicious code in biosignature-install-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e28139bf17900b26cfd1c36852cba7aaacebbeb146e4be1d8cbfd36b811698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189156 Malicious code in relay-neutrino-procyon-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b46d1421bf767e864fb70e46a380881c11baaf943274c94aeff70da06d51a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189403 Malicious code in sed-secure-rain-water-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd93355c379fb04cebb47c7a76029b9ecbc852e8bbaae7413f21844b2222cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11c422018bccffbdd88bb97c70ca755b27c646ecff900c1c8112ecd38b80a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77232f97b19a9a64f75f16db25244cd2503b2403be7a8c29c166c615e7aabeb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbusasoaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7155e0f156014ec0119237805d97fab5d58a1d223776a94e4950c070bd3528fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafiofiah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04ba84020d9dfc8509e469969615a44d0136b85bf9318cd208335202bbf0ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-ala-yulabku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b275adef58f80c45be06888f60dee89b695fc74d55afa7649b8d5bc34276f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmafdacateu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728275778c3b4bd199f02e88630656b033e17b6cb4c2fecba1ca0d28bde5be1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a81d3762cd8db4f574437e3d530cf12aaefa09bb4e01362a8976355a8047a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uuggaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1d6d301b19e3831792a0177984fc801fa47754d9d7df51ceda15ce20993cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ufavcseqinsdaayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ae13f46891da3c1b3b6d2dc4f72f32de6cfa134be90c6614106a06ff358c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33b840d77d4e89e100dae8972ade33fcfffee39000c4036991a733ad560fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaiaufoalfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0d5ac3c308c7062e9a036356d517980ac103892fe67f65adef8a9c4f91cc5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...