MAL-2025-188179 Malicious code in native-gacrux-antares-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb581562590879071b9edffbb930548ea09b003f0c607354deac206ded34fcbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186043 Malicious code in celeste-pm2-xerxes-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34b9a91ff88597bef75801c0d6dedc69a7142ed8501fa9bcb1cf6c7cb0ea821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187960 Malicious code in mechatronics-boson-quasarjet-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614492e5efabf1a1401db9b9460302bd51363d4bf783ef874d49f513e7be5bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188503 Malicious code in paleobotany-warp-less-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503cf1f4b68ac4105f21495630d3b3ab9fa830d3e32df743899bc45a7467430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190186 Malicious code in vortex-enceladus-slides-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459c37c88702ede938d6aefee367e7cab529ff9cff4c09b2c9bd4ea0e63730fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-na0n-luiahuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6ee69e596a682705f207107f34e0c10882e0761347944b1f2e97cd5565c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e621a2e33d1e733111b7742e8ce0614b4c76b7325f813af24d2e50d6f0d6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokiloa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97178f18e2d81f8bef561f109fca48a0758823bd7ae836236f104ec56c0ea8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-matani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265aff1cbd86b6e75ac9a983fe418a95598757539b124dfb09908301c9d95b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3ee412f171221e7829d13f4315fff8117ca899785af907dd74d4fb82fd25ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafaru-tauauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825599cd5896d80274a9f312ba2489e5ef04252581f2a8e8cee5eb056dd019c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibba-uf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2eb1ae3f5c2c67911542bfe634a0a8c7828e6ff01d08c9189b296212a201b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4df4a5edc09b338cd07a2a42fd30568918b35f1cfd378a8e840677a00907b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585c7576f54ab059834241b928724783c801429fff140a605391577e105f92fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-upmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36547600eae92429126e53ac613f191bc131def7b3eeb5cca253b6d3e18bfa40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-proxima-cosmiconfig-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad310face776321398b0f37422c8df1b5a6ffe9fee76b8373b390f3511ff0195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-cache-socketio-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c505c1c3681aabfe81be57a2886297ccbb2901fd0260f10d2ec586bc0c95f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145244 Malicious code in mysql-elara-kinetic-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00251c250b3e76556a1a9832ca26172cfce2fd6b2a02f3b8d0b9c8b6994a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-achernar-babel-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216ae8f8602dbed565afeda662df33d3b107653d5903360708f4ba454d0ecc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-nestjs-heka-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4b4f01f46a46db96df07924ef3f869689ca6569af12e3d03bf1c55fd5e9340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...