MAL-2025-187665 Malicious code in kardashevscale-transport-tailwindcss-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b0785d3bbbab605d01154a1df23d6d8e5b1d3c853b886843f1d794beda9456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185448 Malicious code in analyze-abstract-hash-code-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94747fbea6244359c0e5f32c8af9461dfd765fc51d10bca1d94dd3e3f0cef6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190200 Malicious code in vuetify-solis-ariel-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db11914411eff91a86bd9fc30e3118257d2d70966941af5e85e4ce806b854ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186514 Malicious code in deimos-concurrently-outercore-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa621761675fd2e3ec7b468f01d71eee4ac950beb2e51f7e89d5533a0a6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189832 Malicious code in taurus-webdriverio-helios-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5e60879dae39c4dc26ef0acfb0ae266ca696401551bb9c57132080c93b8a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abf544e29423b7c4a79b3a0794c0292360330e730a5ed59e506c1cfdb40799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zero-warn-char-class-visualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0376845ad9063bf0f2b9376d50533a063b2619fb2337449648758d04568b0433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-rest-jest-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d14fa447358c02a9d824fc3d31f4bf2eb4969999e71f2031f7f9dbacb0e360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-photon-await-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928a8be2e63151c5a44872a4540168eb5702dc997d95293ab99824e30466315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wavefunction-ariel-pavo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3912a524aeee27b07cbb82ea663ed0e11889501b10f31b17df11d60deeb0c0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-puppeteer-procyon-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942ca35b8c2f4e4e8dc8c86ec24036c42d8ce46b186eda56cebb6b25eb2c0388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-jsonp-metabolomics-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b99ac4b6d1f2920c9cfeb64b32caaef526384c1277eb268f9495396666671b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185929 Malicious code in build-hapi-registry-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d83f597fe639d7acbcf9e97540b25f2a624333b18013c7061e016e06fa331d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190153 Malicious code in virgo-airbnb-accretion-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a7702c5a721ac4a0963beff2c7e3a9eb72bf450a8c26af1e7bbbb2e5aff543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188511 Malicious code in paleoclimatology-izar-coronalmassejection-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756842e6db0bea1f94727208f84d51be02ae8c8974ce68bffbdf1c771231d633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186041 Malicious code in celeste-archaeoastronomy-despina-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c86b174fa7f441665264408c849b5a246c6da4cd40a9e62d57bbf70b68a32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188907 Malicious code in proxima-auth0-eventhoriz-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2a9000c0dcd71777429c94f047ebcee589fc4ce406ca7328171c5d2f75b2a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186466 Malicious code in daemon-old-mu-interpret-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dda0ab04e2ba0fa8f40b2f82ba9779c443b1f435191d835b5aa780d630f42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186270 Malicious code in concurrently-janus-spinner-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fcadf406f92f7582c4cf7874b4e875c3cfba00d445f70dce8eae741d340739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187360 Malicious code in higgs-ichnology-paleoceanography-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448734a11e1e60f2e814de6f5a2cec7155b838543ad69631c37633d80f4e0f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...