MAL-2025-188402 Malicious code in odin-start-sagitta-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878a783e1486851d45d02168357d90a0294a77ebd4be938cad78d29133fa59d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188690 Malicious code in photon-transhumanism-cosmicray-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b6074683fa16520e5fd63fcb6e27cbd091b49c4588f9809e04d8af25c35823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186451 Malicious code in cypress-technosignature-solarnebula-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5b6d2c365fa8597a05437b8cedda2feb5adf1dbce76e271afccd20f7f8e10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185844 Malicious code in blackhole-prettier-plugin-markdown-achernar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb53a6893f547e5d2b550067d21c5dd4f44f24103e7ccc2d9d6da09bbda4292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188928 Malicious code in proxy-process-rho-chi-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbf9b30ea0fbcd0b34c3091843c49cea3a14ca9545d7b4ab2def8a21e698b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188070 Malicious code in miranda-exec-meissa-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa4ae84ddda5465733272a077d844865623f79611a78353acab0d23bf825bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186331 Malicious code in cosmiconfig-perseus-redgiant-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cabf74a61f50af9ee6fb8098d25d2c08526d5b73a3c74ec59e714ad4cb37b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189640 Malicious code in stack-compress-nu-zeta-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e67631711d41d02520521df6190627ee39430a578d67183c97e9628a7568b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188623 Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c5718608669665e65c60caa8f7ae2f05eb9038c1b2a0540f96b584f1ea4dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188744 Malicious code in playwright-quasar-tachyon-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e1811086e60f8c2705e4749e9f39094f5019189effbebfe1ef6a7c767217da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187365 Malicious code in holography-commitizen-kardashevscale-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1f20171430318cb8fc7ea3e9103efebdb68821c4855d5dc0fe7f1863fbf6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186680 Malicious code in eclipse-parsec-native-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad95dcc42d1e37b32db227d88bcbb1c29f48527e882181591d17621d99b3b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186519 Malicious code in deimos-polaris-gridsome-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d7daf5a58341775641235bf8ae1045625d4dfe06b3b0772252ddf9a2d15bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189574 Malicious code in socket-uglify-notify-assert-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79e32644b78e05c920de11e095dba2ea5f33e39ee8abd5838124522edd0c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188177 Malicious code in native-docusaurus-xerxes-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76fb1a9a37978f3d3ec184f31412f0c5850cada7278ca09f41b5f50858bc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186667 Malicious code in earth-visualize-abstract-beta-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdcb9e255cb40cbc9b3900e368a05edeb31be8f58530b34dcf7f168ad49aed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189902 Malicious code in testcafe-titan-fornax-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ab67a6297012e58bbbca384b01496596446cd811f997a2a86a2baf414a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185853 Malicious code in blaze-figures-auth0-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727dfde69f223e063e6c105bee12a8dd3b764b31aff3b3d9533313df6746f169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188073 Malicious code in miranda-genomics-uninstall-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfeacda2b376daee22f78d9a59bb58433ef352a72d825d0910791a5051064406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190374 Malicious code in xenon-proxima-whitedwarf-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8a57d1e9a393d211b58a86fd5f7c5e3a2c390cfb91db8a41ee8f156a303465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...