MAL-2025-188724 Malicious code in pipe-pino-pretty-toml-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de7fe32101812542c9d61f65746d8711f4406289bbf2501459507e59bbcb4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189655 Malicious code in star-private-minify-bad-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c073ea8c71ff7c1c682370bd5c071b312cff6ebdf04d0b7966fe8d9f0e529a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in void-oberon-supernova-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662dd30a3bfdab50f06631023e83a010a07f87f264297ccff4a1f470029289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-wasat-chai-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f1344329b9f15bef4ddabb5681a861f5b2482d9ea2b08719b507819b36de7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187001 Malicious code in float-new-route-benchmark-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9665f090704f17656723a9e6b1d4effa056e5de0f4bdede25a8bf2cccf60faa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190348 Malicious code in xanadu-dotenv-safe-markdownlint-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3910fdac95250d53aecadede785513f9beceed180e4330b90a3808d260b82a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190402 Malicious code in xo-castor-frontend-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075c29e54a9911238abd8798bbb7fef42b22c93a5a8aa1a39d9fa0bf36cc7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186735 Malicious code in enceladus-oortcloud-augmentedreality-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1be6fc81215391cb9e6519837e991bedfbd60da09c93eed5f1cc8fa4dbf37cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186275 Malicious code in config-darkenergy-heliophysics-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3f2a08be0835c663a99803c2a7fa6298b462438acf40f200e42fac09cc218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190476 Malicious code in zero-warn-char-class-visualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0376845ad9063bf0f2b9376d50533a063b2619fb2337449648758d04568b0433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186797 Malicious code in equinox-kastra-pulsar-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e7bb6aee60dd97332f2cbbd9c110f17a7cf40c2cf296da8e53fdb919edfdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iguqakraidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc362e6dc4c4a2906bcb51394ec9630bcc118bd39e7c1ee2c24c1492beeca67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b70c5ad40f6211c37a16a7fee970f99a23120a6a4fd485a805f88d1187177ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikiakbuamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53af0bec88534ce6d812d57f3aeb76ef733d5c7584f5adef8f0693c895aea73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ce66689fc6613776d0a7f0fadf7d384969759679217eda930b7fb1e7d45adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaiaubfoalfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75aea746b303a008dce774a3313f8e3d7c7a87a0e911fe29dd8d38257af021b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737f9299ee0d4afa1b181be215d620d69fca643851cd5b19c8cd226811472892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dniemnf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e8b1658f7d7c1024f68fbcad6c10e0883d2b83bd3893f728d8ad70b270db2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108fe741ad7c7087330710c10bb807812cdf241ddfd5847226061ff233662a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuivavinaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f96021a42b7c39461dae5956be34d9108708d329cc326911e05e2ff0018f02e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...