MAL-2025-189076 Malicious code in rain-interface-java-bundle-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861caba75a2a254135ada995aca02170f3baf8a663c283e579f73bb112d4f59d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189058 Malicious code in radiant-on-oscillation-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ca9d06180b7ce0f8167aa6796479c6ce559c18461c3ecc78a266ab88af199d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188609 Malicious code in pegasus-xo-charon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181224c30ecd7ac564d8ca1c19e9898a3d4893ef3135055451b9a6683c264f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186493 Malicious code in data-virtualize-cluster-view-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936ecc613606a259a3d77f4c7386303bb0f2eed7f53fc811c049c825c25778a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187665 Malicious code in kardashevscale-transport-tailwindcss-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b0785d3bbbab605d01154a1df23d6d8e5b1d3c853b886843f1d794beda9456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185446 Malicious code in altair-async-jabbah-radioastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dc0d18e8436c9b9b2d28e91de04e69468ba9603a30d5512837f595892c8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oscillation-oscillation-accretion-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aabcc23741bcf27357094729678d0020795b582d6ff8e15a2a87d1131c48525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-axios-cosmogenic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699479996c8d027d40da1208f7afdeaf9a940ada10a45ce700f370a485dd9203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-sagitta-bellatrix-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1a517b27fdb18f2f93c4d6ccbb461ffbef3fc61fe0214cd6f5e371ec604139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primatology-middleware-planckscale-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c06a16d39babc5b879b4fcd7ca4b45293e129f38f2eb2e9bbd4ee8da57d0a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serialize-eta-authenticate-authorize-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ea06d5abf8267496be3939dc050bc4f5ec41b7b70514d1731aa0c872d926cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cryovolcano-transhumanism-scripts-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2466ddf2d47bc8e8dd38cee96db75b87faf0e74b2b09eba243961d988a7a2cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bash-water-resolve-unix-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa208583cc81c4598465e3b44b85048c1d4a747fe9087200fc8eabae365d5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bash-unix-rho-sigma-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe99aa0b7ad9119be18713e63ab9d08cc26a6b086055864547b2748a50896a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eigenstate-gravitationalwave-config-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ac45b72547ad9810a75d1263cb7b9a765a2eb4ffc477983e5b99f4890b2e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-mineralogy-pyxis-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 363a084cb89546d1716a8e50fc4400ad1e5f3cd26c06fea728164d97c956c8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-yonder-algol-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253c03584734dc9e8e93d7161dd055c0d90d428edf1d0c4c967746b29f5ba449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenobiology-materialize-epimetheus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bff12111e26834b786d9cace08b98ae630c9ff4cad6ee080efa7afb0328019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-commitlint-prosthetics-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd5c39fe3aa4ba188aca38f7019952a1e2654a7b513aa87f542447a21b0cd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-apollo-dotenv-parse-variables-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dbf3d57217d8a8fb345de059ba274eff8da19e26b131ff5780683b2ec9c167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...