MAL-2025-188086 Malicious code in miranda-yildun-zooarchaeology-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb6e52bc7a803ec59fb5ea57adb0ca8c9134ad7981072a5e09e122835a6c2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189755 Malicious code in superflare-on-nestjs-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bc374df6bcd185907d9484f3b7435d95ad6326a7b1eba24209d2443c9e3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189165 Malicious code in release-it-library-start-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348aaa3d96cbbca9efb6a3b8e5c7e01f9bfc1413dce9e60070864b028329ab09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190240 Malicious code in water-catch-cloud-upsilon-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee923d12f25e195265318063f9ca7aefda531762b20e5da248f7248ff39084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186882 Malicious code in eventhoriz-perseus-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8dfc94f09b2035ce23b897ae3ff76adb7eb115168d013c0bbd9b08398fa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185440 Malicious code in alphard-gatsby-commitizen-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5b5cad41900c2a1a91c718854a886f4827fa919f848f476fe11be4a3347afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185406 Malicious code in airbnb-australis-inflation-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ecd16b89921defad1c9b79583eedf00225da0e26f2f98dc7a866f52c72ec13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187635 Malicious code in juno-ichnology-dotenv-safe-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661d5a221b43803caaf19c84e4206e725b644315b902ab5c3dd469c48cfcd724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185373 Malicious code in acamar-higgs-izar-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb732a87c0345bf9c561af3f6c8089b30cf557c589c53180609faf4115b2a691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186484 Malicious code in darkenergy-style-loader-style-loader-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63bf79b92c5f6a95a6dce7dc164aa540cba55e4dccae81f7f45965620fdf7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189313 Malicious code in sagitta-izar-dagda-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d66262e7994275c6b59e3b7a607c7666b8e30293a518ce04b1601aa91f38c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189418 Malicious code in sedna-rigel-package-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74aa10afb22fccf556586d4350aa1831e973a396137a512cce8a0fc6cede946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186254 Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bd81e041aa9a99e170a706cfe17847a5bb8cbbb63413017b209781241701fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190450 Malicious code in zenobia-google-readable-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858f7b4211ddae783c9dca4669d04a3d883faa28e83cbba2ae5494bcb0977e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187763 Malicious code in less-radiometric-hydra-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc59368ee0d7cd8aeb4f95689e120819ddbfff2c7c82266ca7fb17267e694aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189897 Malicious code in testcafe-markdownlint-antares-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb416541db246687e8679b0e1dbca3a372426705710771e12da27b8eab1200a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186104 Malicious code in chalk-steganography-europa-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa873d12cc9e98d60b4d9b9e019ed48bc303d6e15fd979722da154321653dd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187250 Malicious code in gulp-cluster-hermes-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75be2e9a1f4408daffb548607099533dca2e521294c032121214e57670fec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190109 Malicious code in ursa-jest-antd-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d33c8be0ca0bb199e1726c8dc39437ee5c00d4402fc8e2a2ea5ffe0b0846ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187919 Malicious code in mantle-galaxy-vuetify-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d095cf3f4227e38f0e854fa3861543aa352678e355ebee87d347cda3e374fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...