MAL-2025-189586 Malicious code in solarnebula-parcel-biohacking-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ed3cebc11406d149f99f7b8fed1fc90bbf3c960903007d1a3ee0dc48bedae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187768 Malicious code in levels-jsonp-iota-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2caecf3d6a606c52503c3e1aa63ab18c9dd86c61c8bf2eeeb2ee0b7f5b2a2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187637 Malicious code in juno-pyxis-barnard-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ba7667bb839b545547f830a7cd64064ebb2ed6a65582c2229a5f9a02be6dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185436 Malicious code in alphard-biohacking-areology-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285400694813ff1ec33716d7a4f6d913baec9c2facd09a917816e0128598419c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-darkmatter-native-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4b7d2e949c0c56d06fd440de24261c533ae34fa972d0a9fb8cd3cce716c207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-dotenv-technosignature-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c213aacdb33c9710b0725f1700b663eb0a518bce1ee299951a5d392aa2e9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-private-crust-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725732624ff25cbca460975f0017c52a1def485c39e5583dd9ba8475f3f98fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-loglevel-process-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-thuban-blackhole-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb6a9fa5d9acaa434dc2364eaaa6b7354739a09a6861905104ab7931ed2f0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeometry-impulse-galaxy-dysonswarm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a771881cabddee40de70b816e41a9e98fab7a207bc97d1bf8ebfd9b215ea40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-kuiperbelt-proteomics-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c314ade66b9a498126b2a83549889c2c81a192088d4ff4e9dd5b78d8bdd4068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-playwright-ichnology-technocracy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c68692941d88ebe215bb0d8b8ad358a855839c7d267716798d4924516a6e1de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-tool-nashira-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b3527ef543cd69dc1b34fa0d37ad7afefd89e8a81e1a3ee9587b8811cac440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-prettier-frontend-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e8b9f5234bf3784b1ddbfde8f82519b786322f78a3a6131c158daba967810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-betelgeuse-xanthus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c6304ec6e85d47dbc95675de68746430ade85ec9fbecf5cad5c5ec8a058683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-miranda-prettier-stylelint-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2ba474c5aaf42da186212d66893866c1fbe6c58cc6ca0109aa83c82304aba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-sass-loader-global-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c598cba85983700b376ae65af350b9c9e8d3c93e46a7d3ad8ddc8430972cf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-perseus-antd-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81323bf2213ec382936f574183e15746e0cdd853bd816099879b73532eb5af70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallax-chakra-ui-mantle-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5160f72010bf6f5762daca3a099c3a80bdc7ccb9da4832813a1a861b6daa7085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-transform-nightwatch-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6daac7520c355f3e9987d2acb56170e40385b4c9e7bd696c70bd2584a925b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...