MAL-2025-190404 Malicious code in xo-halley-less-loader-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b37dc1940687ac22f89462e574c1e94a104bb168b0c8d2da912aebf30896e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188286 Malicious code in nightwatch-interferometry-meteor-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6c3541ea78c2ecfb39f3479845e5c39a51d9f757b6e133b00bfbbf73772c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189935 Malicious code in titan-bootstrap-lynx-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6052c43f9808772f747f45034b0d8b51eecb153991ae94ad357a99ac6a1e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188315 Malicious code in node-sass-commitlint-lynx-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7d81eb99a4b615630e9110e9e4e09cc3bdc9fe3ab07efd0d8b6117778b75e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190462 Malicious code in zephyr-eris-spinner-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea671283f01b35babb5106204769694d41bcf70685cd9e595382d0728e80f627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189127 Malicious code in registry-local-biotechnology-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9231156a824bb7cc0a68e0cebf262d6d2457c813ae5b4c9f8b5ecb2229089b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186898 Malicious code in exobiology-adonis-paleoceanography-biotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e3f19daa5dce244d8394ce62ac03072f8141e96de5ab2a4497871780331b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186890 Malicious code in exec-proxima-ophiuchus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b09158f6d460d1b85b22dc0e801b0489afa54a047d31b5575832b9be64e623a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187773 Malicious code in library-babel-meteor-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9e462c051102c828b4d50e3973255ce834bba491eed99cf30b6f877f08521f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189813 Malicious code in tardigrade-virgo-hologram-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed42039e0d9b78e3cd59ebd720e24df16a2da59377b7c2fa98dada31223e78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189427 Malicious code in seismology-paleomagnetism-fermiparadox-spectroscopy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e3bb3024e3f9552f1550c868b31000a8068d42f762e56f574489f88b1ea08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188944 Malicious code in publish-airbnb-changelog-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba327f3344b387071a4396d178c7fc38bbd4e9fa76c261ec5c8f657092af621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-tethys-eigenstate-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfb5572647b96464a1f3e39c484590bfd31b4080357b71e3ef90b4032612c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyhfyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d93ebb2dd845f1db7f13af9cb43306e82e05c413f5ac65b9c226ea2c639c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee44f315b9ab79f8cea726d03a2c85fa2970e285f82a3d77ac6402d8d3a64b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185035 Malicious code in sonic-kos-fusg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a1d1012cace5fee6c9b048af25b1e2f11ef2eb369189e15a1d544eac9ace63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadavguhafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db53e4ad93799bb5d9d332f11ecf2c451be9d2f7d5cd872c2f99b4d1886cd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d41b3d5644fab1ba36b595de637b58d7f2682208565b51a106deb961937b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daicutafamajjauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb69aa6b41f2310c1a8f21da915adf2ba9c9e359e834e4aa93c3d34616e5f1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololghyjhbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ea801b231d899b1d15aaff6ab8719d73f0b1e77def96417a2fda6257e8d456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...