MAL-2025-186023 Malicious code in castor-janus-interferometry-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7debb1be3eb6e3754c95e06a59277a15e5eb6748a6e5d8a27a83589bac84d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mesosphere-achernar-paleontology-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4217e8c9e039a28f6f66ebffeff5851761a959f419633105a71802b7f46fd35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-atlas-non-blocking-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c136167139e7da8f2dfa597abcb7ee932a4d5968c1f94382ea87cc5b9e43128d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-cluster-antares-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a79c5eb88dbf060771545f41472a61811c8817947e70dc0fc5cc821841efb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186963 Malicious code in figures-duplex-halley-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15be67b84b88a559dde218c9060dcc3b407af67dfaf55e7bdaf84c10c90c62c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187286 Malicious code in hash-uglify-cluster-info-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a3a53ec24253c6ab5d1ed24fd3cb74c1c53f7311dc887ff7434622f50ad233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopigaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5142e8e6e7b1d40814c9a0156c955dabbd069d5ec35283e332cb536042a35bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dc41825423bc5155475bc6a3498a50d19fb4da5da6639d46d057ffe04d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-duban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e42f88a1595f21a0bc2101e12f805f8eeda7094b95a12b5bf0e0c33619626a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbsgbajtrefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2394e7faf400ee3b8f270cc9ec7d59e442bd656620ba9bd76a98aedb3eb68de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184876 Malicious code in sonic-ijos-aaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf74211cd544e2a039a5c5ed42be2ad10226c5357d47d6e8093347d686e1624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181361 Malicious code in bahenol94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5d0bd3a06aa22b146d3191cf8f0e799c2c97d79d1b1fa6caacc8d9918233f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc096aedd33233cbdf45b73e1e66dee6490138a0a732c24aac16515a99ec1dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179506 Malicious code in anabuyil-na10n-nitanulki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3c0465bb4f111100cdbaeef56b253062544012862c78a9055fbca77e70106a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161300 Malicious code in nabila-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b48eb66c530d3a343b32259cda331d63c31c6cee74ab201fa79338030b98d56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162259 Malicious code in nokire-akaza46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7c49b8fcadaaa06d17d6ac1b1086ea67ed51e5c198187ff8e8ec1a914e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61612ccd96ebc258104560e7581a6b67fdd1a0dc6d7d5fa970f14d3cf601655d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutawadr-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d785f05bfab38c79b240e88a0dd09626c623281bfa91df55392ee76ccdd7396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dghg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69591662f491700c232f1eb7f409ec6378e1d48af0d58405bc86297c600064b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-adast-asda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7134107fee8a63bbee128c1c71f46b42e874a9bc1f23f56ada0b4633911d87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...