MAL-2025-187157 Malicious code in geoarchaeology-superagent-entanglement-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6f7254bc5c1d8873ad78828802972fdf108ab7457ccfea0b3675f7c3c6ed11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188370 Malicious code in nuxtjs-enceladus-miranda-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b43759d17c66985697b3c9e19ac0173377814fe579478b446243f3da452a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190064 Malicious code in unuk-deneb-pegasus-primatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27ede54e5593085ba94fc4f12c5c6965a752303a039123cfc0f3eca6482be47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189269 Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961e8a7cfffd287292e217d76e3379b062907280f409cf0ea9836155a60343e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189258 Malicious code in rocket-fomalhaut-sirius-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344f2bc058eebc6954eb5e9126619426a4e49a9670f2df757ea7590314e6af3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190007 Malicious code in try-alert-hash-catch-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85fc5860c00474af9c73797df5baec4c6920cae1896fe84f084c86f57a23547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189604 Malicious code in spectron-commitizen-server-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5520a0221162a9daff8f9fc7fd1859cb9e5017d1fa3d3de33024e017fc173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187636 Malicious code in juno-proxima-wolf-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47028c82d41ce63151937e576d080b099eb94441f3ef4d03707857a5baf44a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185601 Malicious code in astroinformatics-ethology-venus-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226e9d3d2ba28c131f256e2a26ec85fb9afec9418f57e00d7ec0b300e0e98206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187767 Malicious code in levels-event-bionics-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bdee777e410b3fc1869f19ba81326e968afb704dace7f49fb14bc7f0397e233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188484 Malicious code in oscillation-leda-warp-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4034a7c18a9c9766f734ef16d4eadac9e3d3574d8910068cacc02e37e741318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187507 Malicious code in integer-web-key-resolve-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94aad90f40c30ad2202a9b22aa2607757388041740bb1902fc51611a74dbef91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186103 Malicious code in chalk-soap-eris-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dfb806249dbb13adc7a707fc35469c24fed0c44496bb851f9c5dfff3945dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188886 Malicious code in protected-reject-decrypt-bad-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfcdebe8a06399cba0d551e3325ec3887aa38ca3c9716354f910f7f99bd5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188131 Malicious code in mu-dog-proxy-decode-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88cdfbf38d06291aae96e832f05b29f00cfd35589943f585837dc348ec6b1fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186466 Malicious code in daemon-old-mu-interpret-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dda0ab04e2ba0fa8f40b2f82ba9779c443b1f435191d835b5aa780d630f42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189807 Malicious code in taphonomy-phoebe-mineralogy-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d0b38ae49da146c24c104347787c4c7f2cf17fc32dfd0d2761d705c9870097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186979 Malicious code in final-dog-throw-resolve-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c2397efc5859b1076b97685efe63f23c65d3a4a53c6aa6861d363cb5b8cbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186751 Malicious code in enif-frontend-carpo-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fc721aabd2d538e8644cb4667b0304f9635e08ed0d4c2a986383e4a2ab9e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187579 Malicious code in janus-radiant-avior-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3482009acb57d79c98b331584817b5b1aa0eebce9c890bfefe12f45ffe90242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...