MAL-2025-185621 Malicious code in async-integer-xml-void-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d48c508001a5caf907b49536b0ad9a4441682c36d3759a30a20afbe49f07839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188769 Malicious code in polaris-stop-sails-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fac81b336251a0f2225253fc52c78a5c8a042c98b17ae78f075da6345bd3740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189496 Malicious code in signal-star-benchmark-report-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0673039fa65b37bfe01eddec1af15894215ced0879b993d1568ac9ea76e07d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186946 Malicious code in fast-stack-tau-execute-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137b84784289328d3b9ba7b56948392fa03badb0f041d479bfd6c1126377132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186309 Malicious code in cordelia-websockets-yakutsk-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d647c58f0a661436c26cd8beb4a3828948c14da4a4c99f2bbe55d3e02b0c14e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185767 Malicious code in bellatrix-gulp-barnard-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f7e32234b92867f6b230c143440f62bc1655f5c517cdf17517f6c027d7bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188158 Malicious code in mysql-cassini-unuk-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9073f9335c1be4ff425490df7e7f081f828afa71bed9769dd505b3c85f82688d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189058 Malicious code in radiant-on-oscillation-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ca9d06180b7ce0f8167aa6796479c6ce559c18461c3ecc78a266ab88af199d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188353 Malicious code in nova-ini-greatfilter-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0ed4677af6ac562f86141705e1fc862963aeae5e02789ae1615b8b8ebbb1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188081 Malicious code in miranda-nestjs-void-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66857fc341cf9218638687621ff6217ffbe1ef435686797bd875fae2e6ee4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189159 Malicious code in relay-xanadu-playwright-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b343566d9c2b440cb6c55468fbad158ae781470ddb8529d7f26d72f7a9e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaifoalfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7744ca8fd8ba1e2436b2f6d78d8193977c246188b11409d5777fe13dfb8a6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoerocnaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a78815db86c598134d1d064ec5d190d96ada7a3b9e87376860c806273b1c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57a8dbed1f47ddafff5118d5ab9f19e48e737ab7b563be1a5d28f83b2b12c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-giso1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e940c41767ec424f4b222f4a04d5c377d616f0cc66c0b9234d11e0ef55213b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afayoruaganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a90029c815983ecadbd7bfc4d777053cddfdaef8458630b4bd84be31d0034a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgtea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9023978dde1a4cd111cb9747beeccef1da4c46a6a2c7c1144e49d1de55c2b21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iayac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9813b9e5e39ab0726638a598fc5e2738e707b457adc23b546905f8ceedbc3ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b6bd6c7de26d56aabcd94dfe8ea4a1865635b16b8f206aac27e975ca9199e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafifug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f029352f431dc278bdb6cf3173e7a5402f991dabd4bb22330db1fef957774ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...