MAL-2025-186395 Malicious code in cryonics-magellan-bionics-tardigrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35509feb00c10d70419411c894a45931a339c14f56fd0b061b3718d5ae85a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185622 Malicious code in async-iota-pavo-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1b1f4251a47dc183f09a26f155bd0931ec87d8606fb9177ab5ad1f58112403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186586 Malicious code in dione-dorado-apollo-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcbc7931eef29ac5c5af7ba06802424115895cf2f3b63f7ae23d400ffbdde7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186476 Malicious code in dagda-technocracy-commitlint-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5d983e33879369dd931cad741e8149906dfd91e5b8a8b102b534b4b2cea15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189928 Malicious code in throw-omega-catch-hot-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5660c7de16bc52821723bdfd1087c32d214e18bd66d23f006a40f55180fedacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleontology-sedna-enif-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5223c733e49b5580cabd03e1467ed68395961b95f4b6b336840f56f367bf98df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-on-sqlite-archaeogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742c3f14038069f04c50c352cbd97d098d6f27ab665f78f595fced9e20fb1028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-phenomic-odin-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24f316c2017efbe3858a178ba430fa5b15695ba388d42bc7350613d60c043be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in throw-long-stub-thread-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d1911fd1bc8fcee8202007abcb6410966a735e297b3dd98ab21559a2490b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subduction-phylogenetics-tachyon-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d23e85fad2795bccb4695d01f55d114917b907a7cc918c35106dd514064a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallax-janus-deimos-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36fa586f7c683f8a681203065dcb93883653d448d623e0860603acbcf21c0ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-volcanology-eslint-plugin-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a823292dfa1cb7048c8d436418ff0a75354f1851e8773851776ba8f6a0c2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in futurology-aurora-express-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09150a33d0cd50a26dc4d3bd21db4685386b647c7a4261be0ee5d3aa92dbb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-resonance-triton-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf63178531eb1e18ec7be76ee8d7757e6690fecc2d546232fa954284ad7bee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upsilon-fork-pi-index-emulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76974f55a567f0b9b70350fd1ba445bbdfefa6a623c5d9e10626436c7b19827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-leda-polaris-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26ac025f1dd1deb89a7e6ba3f1fc6a89fca74f70a01f227da94833143abbc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-sigma-authenticate-alpha-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee2fd7eaae17bcfe497670b4981d8335c78d72f64e14dfce16f06f0005eaeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in photon-airbnb-virgo-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c86807e608c5b48c721b687275aad0c86c57fac80d36be0425e26e2fd6085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-neutrino-html-webpack-plugin-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a14acd51b16527de68df05b7eba63021818a88f6afa51641dce35a4440aa5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...