Malicious code in cosmos-yonder-grunt-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ec61cd9ccaae23473fa62ba89bdc0cd77a1cf4c2ad714655057db11196e10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187874 Malicious code in luminescence-colors-resonance-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b436ab9ff3e8151563e055e479bb058c0a0e3b067ceafea6f8f597b6542fdf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-schema-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5015d8e05db5097f2ab0758f0d0d42285be94e469cecf52668d3df1eaf57c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-altair-izar-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa4728fd5bccd6fec6ad0f4459479b41c02571c837732ad3e92688a04eb9bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-morgan-css-loader-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df18935c38976d8952bf589369f1a0e87fbdb16e09e484594e5e302fd8d55ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187970 Malicious code in meissa-hermes-callisto-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b633dc83b81fa2bf2811bca79ee36d4afe31a1d5a5ca8d3cb8a5bf01364c7dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-lynx-baryon-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c047aaf9be12297281030b78228cb9cc29d099a9dbacca667f8943fc6b2e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicweb-leda-sadr-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270c6cc6b73cca0763aa3fd40890eb81c4f654188eaf7bb4cd3ceb9ded2f43e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exosphere-rate-limiter-transhumanism-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45bd20b23ee0ecffdb48b76d8fcdc102490fcdfd53b365e4e5e3b2812e4b4245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutronstar-hologram-volcanology-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16c455d2bae43492d5ad9590dbe8f3ae4aebfbac806f385ed676a3856de3121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-user-static-small-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64df40d8c88404b0fcdbcfd8a46b14e2a3e655bab47d6be8f43f550bdf10edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-antares-winston-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddd0b309f243a59e5c481a498f75eb1c403e12809499a7c5b5fee2a091da4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blazar-markdown-umbriel-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5715307270d9f6747af2bfba7d787b5b5cbc5c54df42ae3ac425223d35fba0ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180222

Malicious code in auth0-scripts-slides-build npm...

Malicious code in ashjustmeteai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09849e4d7bb47b00bc95d21ce1d37e4b0161620bb656822277846a8d2d761245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-mesosphere-astro-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f500d392e79b09d20edac037fb631418c2a0f9db9f0dc9a1e9e0a350f6138b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189481 Malicious code in short-load-user-slow-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600c427ac4dd88f40cd0ddabf7f98443d4c4258c3bc18198c520b794f961865e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190387 Malicious code in xerxes-nuxtjs-enif-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3df68c1dbb342fe2e72f7fab9e48410d45a2321d9e4454632ee3c0f2b8aeda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integer-optimize-alpha-byte-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cc0597617c50b1abbdb88a4a1f29177a51dd4efc9e1e4472762f2d4125f247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186633 Malicious code in double-final-proxy-gamma-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ec39ff7bf59b56c61810df48a1d2af795708d4a5b19120dd66226393f90420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...