MAL-2025-187413 Malicious code in hyperion-kastra-paleontology-magnetosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31eb3cd862886d18136d81f8bb0cf91c2c741c8992f6409480b516a287b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189426 Malicious code in seismology-meteor-odin-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646f08ee4ce2efea4fd05b134c78bceafe4473b1a8230e8c29bf3c6d80d94773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187011 Malicious code in forever-heka-polaris-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549cbeccda483381d702c303bbb17493a0b42b4983911a75c13b972b2178d872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189247 Malicious code in rimraf-playwright-morgan-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605f4589e9fb73840fa4862f5d97c83687042c57fc5d073de4da60df0027fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-quasar-oscillation-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f01e210d092d65bfb2d9e9fd1c8b58ae91f7c2b576e31263551297da6ad93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-nestjs-izar-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a230d94bc32273176374265684eb0eccddbdcba4bbc1819c7f8b868ec0f5e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188139 Malicious code in mui-meissa-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e80d941c3ae4c03da2554b9884257c7aa6be8bde051d376559e56e35e912880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189721 Malicious code in subscription-firebase-buffer-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b3d3ea91ba7e31304c70d0495d32342ab391701f8f85c6ef96e71bd38a1e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-quantum-computing-eslint-plugin-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f24884b7f8123dd633e86819d246df7e79be71c3680536de53b2cdce89ba5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189962 Malicious code in transform-carpo-charon-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9df721a1d001a47a01827b2556b96ff9d55853def17552c84f1c6e05a3172c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186231 Malicious code in command-dotenv-betelgeuse-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c0eda4bbcf824a758435c6c4648e1bacf43810c9b85cf1effc8e2dde9f47c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabbamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc69f9a615f06a1736629eff2fc029002b3eb2a54e46cbc06ac8f471c33db0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183305 Malicious code in kiudt-acvog-uu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1009aaac588a708677af48ab3c6533a3db218f7271aeda455f768e367d866cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181632 Malicious code in astam-ifst-diakg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b97b5900ceea8f540bcf6060623c42db5af2824afd829a197b35f8cc834d20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fa94e87d73c216ebfb4394a898a713981b9e7138d7c1a4b1064fb2d46fef12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjinhtew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3fcefd042caf68a4b1112755d2d83608d50b89e71c6e40acac5b261abed63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50e29e8c15fcb58c4b7357e33a2b8c505d315332dfe617caff64ad7847084fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0ubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e8c24e6157166762c93e9abf8d00423a21f73d462b1c4ff370e3091784b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184228 Malicious code in modasv-kuu-bavoisbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e93b214f10f289997a5e9e525c03db4c58cfa135c59b9219482c023e33bfb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba4af3582761663277689312c3073408897767d94b09a2faede41d8fb8cb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...