MAL-2025-187532 Malicious code in iota-analyze-transpile-iota-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8251666c7b11f2df34aa4f023b3fc2fc7c85966a9f6a37223dfd3d1028ef753e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189290 Malicious code in run-script-juno-supernova-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5416570aa5bf98628db20b38d6aa688ee1a11743013f75bbbf34b033fb219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188850 Malicious code in procyon-spectron-webdriver-nestjs-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bbd9161c64afc49fa855f2f702c58f7550b71f364944f0224c1323aa0cd7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-biohacking-helmet-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7742a784bbf8e25aef209fb9ada0b1ed98d13ae9a49bfeabd7dd63c78da91c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189976 Malicious code in transhumanism-release-it-neptune-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39b3f66ea8caa13effea3b58e8a9279c4089d79de52f175ab5a325c1df8faa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supernova-astrophysics-jekyll-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46b2195c3e0992cb15bb7cbbf584a0b5e48b2b1dde2a44f4956181f8ca2dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-lynx-baryon-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c047aaf9be12297281030b78228cb9cc29d099a9dbacca667f8943fc6b2e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-event-resonance-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7eec21520de8ed6c0a4d6cca52c2046b026e45372eab13e437e1cd2d38c4f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-aldebaran-miranda-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d1896c35173f726b4ec506881e4897c4a13138416fcefbb01ece9e47041a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-enif-robotics-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49d84ee8d80414f9e2624545178e0888e208b9cbdcff9007d1a5f97bbb230c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in authenticate-scale-analyze-book-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d038c7d079b519f31ce6b09657db6765d1d0007fe0b8bd295d08d7806e81e80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-resonance-farout-baryon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5d96a4541e7562f20a9b4fcd284e9207e6c3730ae698555ff68ddbeba4023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-subscription-kuiperbelt-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532199655a42d0bf32e8d6cc375b714b6858799c46c26c21f4f6bce0f38d60bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-version-mdx-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006ef0eabe6994dd52d5fe0f9aabf541ce2dfe591b583436dca8eeb42495bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baryon-antares-leda-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf008fa0c59cf2a2efbee43d63306487f972657743488c6054ff09cbe33d202b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-ophiuchus-markdownlint-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f23c5a0ba600a532021dcbd3268280484ff7155d1db4a995258e9d23bca9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-cypress-miranda-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43dd448ae4158d3d2faceada3991d666141cdc96317313f34e86b4d6773a6daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-foundation-request-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc9fd0a034150e047fd366ef04b684968fb67604112d8700999a30a191a84c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greatfilter-nova-morgan-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a41bbd5a3eb7b2cf34d987772360f300333ee568f6821c4565123bbb63346d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-octans-taurus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08a561f7cad6fc8181a710ccbe3dc3c4893aba23442b6399408165dc7bee9f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...