MAL-2025-188836 Malicious code in process-outercore-nestjs-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3840693770ce011f9ab6df4a9849100f172d84317ed427c44211f6467e80fbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-orbit-iota-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbfd6e5e96370c38700b129593b52a7d859df25adf5ca593c54da701eec1872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenobiology-galaxy-supervisor-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9780d66b7273cfefcf3d7a543189a07d3aa5cd6748bc5dcc03324829558117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in star-earth-small-execute-decrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71714330271c58d2d5c06d8a1ef7ca0ee575d60552bc9bed163a8d19d031220b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-bellatrix-superposition-interstellarmedium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1342c69244da654b3900d26efb403b53881ca8917a548d692e0bdd73e2e976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-ophiuchus-mira-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b6aeb47d975e9c581c055a5fc588f2982e746b1eb66b2ea5080cd10619df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-upsilon-link-kappa-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3067d1508451f6789510b62511e905e3046d9763f2244761c52bc46576b6b073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-blazar-quasar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128176b0ea3dd4cd1df472e8b25d1a0d98e84d2b8f1a03ae9e5ad8efb29eeab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-zephyr-dactyl-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41972a45f6193c0e871bc179bdd7dab9cdffb8574219b66bed2cd9c14afd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parsec-oauth-jsonp-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d8b51f1ca029d90bb2f910e5f3d92bdc1573cc4f996ae4858417ff3dfd2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-reveal-md-gulp-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c9a9ebab25040a460498e03007c573cbb11e115468874f72229a75bd80ab64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrophysics-extremophile-library-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf10cbf40031ebfaa532db3444c9428c5e03586a9488e2adf2fbc812a3d7f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-dorado-impulse-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65b3ff1c02ec4218b6d3cfd1acef8705073c0a75768296613710e6fd716088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prosthetics-commitlint-astrobiology-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfb4f7c503130fe491771b7258e74f8a9cad2cc0d49ebd7fa62fc8813bece12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-blitz-selenium-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6263d90a50f469b364498e2b135964186baddc756040588a3c53724888fa7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-biotechnology-xanadu-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252ea35406402f4bad38396317c238088ec6afcbe8e5aa922bda36ae0b271afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-subscription-quito-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5366b5b7b684a3e273fd85e0ab2aaaf8b1272bc3ab21fb5c112c75452dccd5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-mutation-geomorphology-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac0904819dc58aca2f9b2d22deb2de205f2e302a35166513ba08c2cf0230cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-configstore-nuxtjs-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44184ccb146fc77b323b6e19c51c70a173fe426776802cee54b2452ea63418f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187282 Malicious code in hash-char-new-alert-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157e9621c61fae908d1e7be8b87a7307a60fae9033b01116533f0b50fe64262d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...