MAL-2025-186282 Malicious code in configstore-centaurus-writable-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4d2836adf3fb394b565c00ce08f4b87b9bb6ed7d0f8a9228fcd46d24a9735d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187218 Malicious code in gravity-taurus-superflare-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91698d43b1bf58166cfea0197f507fd9230c66eccc5a874a0d9a0c15151bffb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baryon-ini-biomimicry-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3513dd31103848bc094a4a190c5ad0a85ff4cb3dc49d6174a5d5e91512ba98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187532 Malicious code in iota-analyze-transpile-iota-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8251666c7b11f2df34aa4f023b3fc2fc7c85966a9f6a37223dfd3d1028ef753e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185554 Malicious code in areology-eleventy-cassini-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba97426e3f33f6de299e1fcfff8dfee76502d5f73058164cf60ca33917a24a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190277 Malicious code in webdriverio-europa-perseus-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4635d00f0f29dd9b3d32c9a6526c9257c08c69a9bcc4c3d92f292ae61fc175fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189891 Malicious code in test-theta-old-yaml-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3105bd46bc3bf37e1426594d233e6aaccf8654317b65946cf727eac0782e7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190391 Malicious code in xi-grid-module-sed-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a634fb198cf4383219f1b5b1c69e64a93187d6e1183e224fce675be68543101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in higgs-biosignature-inflation-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6af5f94c074749c796605831b304d3b23f9cd7ecd27b0771334f6c877a95bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-miranda-karma-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e21153db14daaf54497f5b3ea3e6b717421a572780efa5d938efdcb121cd30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-farout-barnard-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3deb299289ab58a5d665be2d8f00891334e73390e4ea998ace64dc54f4c5613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minify-permission-xi-route-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61768cd6c25dd7a0cdd37434af8d09fbbf3143127384b990e81de835efd08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-final-minify-load-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75fbbe6fa98a2710439a9200503581e6e720bb1a731700d2e88c78c110effd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185775 Malicious code in bellatrix-quantum-inquirer-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e4ec1ec944756074c8f5701d354998ef621ffeeabd85761b6dabf3e976c217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joviology-exobiology-antares-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a983ca5a53cd062c2f7e73f4666acb407c180f401b30966fb51f59b1a69a552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188032 Malicious code in meteor-singularitarianism-procyon-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f87e7aabd6edcc6661dabe6c7ba3b26e4096378ffca7f6816c4bc5e8e82a9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189100 Malicious code in redgiant-cypress-mesosphere-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7930495e498f951b678a425515b1e968f43a896afad015516602ba290771553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187082 Malicious code in gacrux-farout-publish-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452c960aa8905735a4d5f1b36b9b11902ec192984de6bf397eedb20365903d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844532ffb61dedf116bb671dd0cb7a8e6ee68b4d6e7b7a3137265a273e7fca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187018 Malicious code in fork-eslint-slidev-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f8ab67ea8427ea5b62140b04dc5a91e4b2512ef31a7be5a7f29ca3f838dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...