MAL-2025-187761 Malicious code in less-pavo-restart-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a129e765e40e8dce28ab9e4ec2c9ad3d9c0771c06a7bc9dbd4186cb47a879e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-webdriver-mocha-kinetic-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150f89806d0e3db6e1a5a953b3f96457bdd5d51522b9cbbbd9401b3cde6bcc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-thermochronology-parallax-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edfdd0642d9a4048a8b1734c5efe86d4bab6e2ec788036da89cafd83cb23f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socket-uglify-notify-assert-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79e32644b78e05c920de11e095dba2ea5f33e39ee8abd5838124522edd0c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189954 Malicious code in tool-dependencies-dotenv-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36ff10f503ecb03d0f7855f87e5eb97cd43f2994534487d509135bd0d559e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189165 Malicious code in release-it-library-start-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348aaa3d96cbbca9efb6a3b8e5c7e01f9bfc1413dce9e60070864b028329ab09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188014 Malicious code in meteor-bulma-augmentedreality-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a98a414d2ee0424f8b9bf8fc79623e0b8b7fa9ff1c5249382548f140103353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188099 Malicious code in module-data-secure-psi-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0588a47bb58349ff90bb5ef1641bd09c9dcc5edbce002d0762474874d097c635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186261 Malicious code in compile-xi-small-star-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4093c99a795c5f49e5a473608bf2cc7fec08c50ea65fd9dfe7bb1d5937deefe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74b8cb6c2b8b495768b47df5b789a591e633d060538585cde342e9d11befb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-huji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60817f8ff7f3e21ef74adb7f4fdf58aa194dac8f7192b280b994be0df8186fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokamakuasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4f20841a057b8f5bb2a0f7c3e815f594a07a1c3f49538078b4a0ccd387058d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukaunai-huaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e72276814163d204433c15ddd04389d0e3af9e1e85d320d728b35bb3fed15c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185082 Malicious code in sonic-ks-ahagafujihuajfdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7515f4973e2b5f7a5ad5a2c7a92cf6a13b48d9dbfcef24af4d630a7d795d4cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycurptvuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd28b3c45a2dec16188613ba78931b53abdb4e5fd73bf9f0b517f3d0f2880db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181733 Malicious code in avangi-hola-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9293db301410cac76adcf7162426dc1658a250b23d728aa052716c95709f28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182227 Malicious code in gociy-ung-ugaudsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9513f7cdd195317b0b2b60cd253198e01253895bc7605dfa9d4f4e924b22e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182800 Malicious code in itale-adci-aknkonyunaymhentgdti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fceb9adc0ae446889fcaeccdefa3fd2a02a982245908f0419710bd481f4dfa30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184653 Malicious code in odasv-kuu-bofaufsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763fb2c7bf112c16f7b2c8c23e58c991283f08b0f9c7ee83565624b669c80943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181963 Malicious code in flights-lutag-idosabhao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e879cb9d009d6562bae99863c7ab896199779961fac7bfabf1f0ede655fc545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...