MAL-2025-186439 Malicious code in cybernetics-selenology-local-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45900616fd9126bd090f5865bdf4a028806e11b2380fee63848bb099345c6c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185402 Malicious code in air-minify-load-secure-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185987 Malicious code in callisto-europa-buffer-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f44ccada191c2458e1ca5eb15a396e16cbb99112184ce38c1fe81ce1a0e4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187436 Malicious code in import-log-monitor-rho-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0aa8e668ba36d4d41ca2d43ee6c401b9c982a3750a080700e0fadd64b7ec5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-hapi-publish-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f30a4b6ed232f3a0f88e9b315c00447a3e16a47c406a885a51e8efb67a3253d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in load-fire-balance-try-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed8bd45f714ed76dc28e104d80484f6275477e646f6d793386b90377bb12749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188154 Malicious code in mutation-exec-arcturus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 482caf12c32414f2e9b669998df2ea4c0f636c61aa2294ed275285eea1b96a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188784 Malicious code in postcss-loader-regulus-whitedwarf-paleoanthropology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d9e1ff0973c423e2d9f4461d9daf809ea0aa47669997b06f7a4589bfbc9396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186887 Malicious code in exec-local-mongoose-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b872afd1ac291d4ad9a6557070b1a111c63c386c84d16d9637c174bb6e04f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187562 Malicious code in jabbah-pegasus-umbriel-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa305b62d59cc4fef7b21f6541fc211cc89fefd1acd2aeaa45a6ccbbf4c0ef70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189227 Malicious code in reveal-md-process-ichnology-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3d88f3b3bcf3f3b98fe360b6e28a6e51a6c3eece1e447e88f1decbd0867a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186941 Malicious code in farout-mongoose-process-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7370c65864930ebd6bacf175c8b7aaa4380ff7bb716ed897770cc7119cbbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187891 Malicious code in lyra-janus-spectron-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f974c1d7489ce1d1c09c87907c9d339d8bc8a156c498f4df32f39841f470b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187989 Malicious code in mesosphere-innercore-transport-proteomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bb5102ce8c8e9dda9b0ada71dbcfecfeda472735d4acc10e395b1193b6af4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189567 Malicious code in socket-easy-balance-virtualize-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81d7224dd9cff3d91e76d5be9e28254ebc4cb9d6646e3dd793d3b04ca87e64f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190168 Malicious code in virtualreality-gatsby-brane-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a69bddd80a5fc377b3fde1aa2198a277678c7183cc111897c0ec1e4b44f9f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188558 Malicious code in parcel-non-blocking-bulma-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e29c535824f02cdf2ded03b6607107858174dfee16f23bccfe9006e08b3903b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187206 Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827a1eab8ee4f7a8518854247fd592f6a76ba721ba6900d144ce9f687b27a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189219 Malicious code in restart-apex-loopback-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee23013fa3827d0680b480bf208efea7b8f2b19d350a6479f7efbdf498a4c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186982 Malicious code in final-uglify-decrypt-enum-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51cf34266ad37aa88ee54ca8fef0e48089c1c23d25a4a498c6d0188672152636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...