MAL-2025-188253 Malicious code in neutronstar-quark-dotenv-safe-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ac63c08154afa26f71278cae2c6f17bf39e6835d2f205cc35e304e1bf2f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-algol-cosmicsilence-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61401dd027e8d1fca9c02b35b4293c1cd561b78ddd98e7088a45ed40565dc0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189159 Malicious code in relay-xanadu-playwright-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b343566d9c2b440cb6c55468fbad158ae781470ddb8529d7f26d72f7a9e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185956 Malicious code in byte-log-float-cold-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc6dea622dab21577f0634edd4d2fd1021f58c87893f0f7d96072fb0a69a8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187626 Malicious code in json-miranda-karma-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e21153db14daaf54497f5b3ea3e6b717421a572780efa5d938efdcb121cd30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187919 Malicious code in mantle-galaxy-vuetify-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d095cf3f4227e38f0e854fa3861543aa352678e355ebee87d347cda3e374fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186132 Malicious code in charon-transhumanism-zephyr-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e9cc4151f57f8ba05200f8b1ba05028c6a90c94b8c52f8a531176c4da4af830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188681 Malicious code in phoenix-apollo-nextjs-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fae748e0f487ac104e869992e792c26ef9f016308883c633af2c0eb474d1f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186318 Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188739 Malicious code in planetology-stratosphere-library-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadd62ef40f3b877824eeb1b48d4aef2ca574fcb0f1eb2abe17dc8802ac3c894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187040 Malicious code in foundation-node-config-farout-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3793dd3ff731c5c1110f0f04402bcb024a4a5017e8a91628e170d29b6403c4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f221bc7412471e7ff718bef5da77e89d40c807e9832bb938ed29789c90b0a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafiaacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2414612dab8fec89b06d3a71c4dddb8cfdbabc59274eec0caca34f8945a15bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-ufisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06c2c3df1295b25c44608ab420f61d42d351f781f4f5e5e3d51a3f56b2e26a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0555f8aff6282b6348aa4592989eb4e4f1c76bb6f7c7e133ac31cbbf6ecd60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvfugudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7971b3e149a13b1b8a2add0cfb73afccc42e45718eef695f5e209d55f57bbd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafifug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f029352f431dc278bdb6cf3173e7a5402f991dabd4bb22330db1fef957774ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmulfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74df865cfc82a36b129a9a67d03842314a9bc49b75bef343ec3ee442e4a2267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b6bd6c7de26d56aabcd94dfe8ea4a1865635b16b8f206aac27e975ca9199e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcadgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541cb764e24880fee7bbd1465dff38717ca640fb7b6010f4e86dfe4490b008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...