MAL-2025-186527 Malicious code in delphinus-paleoclimatology-stream-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d619d01df637e0ed08a8b5b8184ba8a98b8c2e150823265edee3ebdfaf9a7c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190274 Malicious code in webdriver-mocha-nightwatch-cosmiconfig-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3cfc3b8c341c20b4e8af0757b87d8eb021f0af5c7c338267d8024659a8cd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189870 Malicious code in terser-webpack-plugin-andromeda-zenobia-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1353b216b9be652df251b86f5fbd1ba87fb50094ee212a5f9118d884dc328d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-terraforming-commitizen-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd15125e8c1240c99c49d55043b1c295bb37c7620ec8c2e54627a6d174b5d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186220 Malicious code in comet-perseus-andromeda-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aafdc9143f2f03e019398a2f17e8554586833012e56e2e3ea753d55afc6471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-google-webdriverio-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d17b26028a44c6a611d61546ee88d844106922a582c3cdf99c42dc06f6d7f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188118 Malicious code in monitor-data-uglify-compress-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fc316f02dce0d561bf90ab32d3702a34a86ddd60eb81d8893367f9b0125e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182325 Malicious code in imodiov-kofi-cuaucdocavgigl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa6c1f258883815f6fd993d0b8e487424db23cef97128aa9bc89a8571007f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182988 Malicious code in itale-dci-jyhfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f6ac4ed6fa294b92b53af7f1e0d25b2b9a867da788cef4b7aea6755263f0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisostsiogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7075f1b2f307be2b5cf8c31bbb407719d74ceb4b2789e975a00f062b1359c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-ret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6801d94a0762eacc962587ec44362073bf10ba87701a4bbba641e1368725b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185148 Malicious code in sonic-kuloig-tgviavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84af51c39cf785f2b5cd232572b5093adf96ceef4c2f288c8c956e8be42e05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179672 Malicious code in kisut-fafunig-amfaaicamicufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da518033e95b953d0457723ba2083324f88f49295b10f38b132677e61aaf39eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173859 Malicious code in diva-bai-imbufabao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f00211b24a5afc735bd1b1c76a838b56b0521e730aadffc52d7111c1f5ee91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176925 Malicious code in nurai-sutaif-danabuffia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07f781e2c76fb70df2dd4f926ee420db545ef05c7b383b54e786f1983b27541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01131e9662f4420413572611a39a689960a9fe85346bb280a107f19155ff84b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178677 Malicious code in sgoodaini-nugusa-utufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591648a8f88555f620b76e8825f61d642d4c8f4f830b03afe94ae025d172493a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfecfe2af4a0bbaffbb66036f40d798ee685737c7b56cb6f74d239368064250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c933c249e35739b9541b31e957b54f2c241e771a40432b946c03ddcf8305b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162651 Malicious code in nokire-kilua6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a9d390d4257d3998e1a004dae0d5acff90732b9ff055cca0e570e510d21017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...