MAL-2025-187893 Malicious code in lyra-taphonomy-fusion-exosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30607827e4a44c0862bedd788a86ca7e751a17e1b53d4cbf6b813e174e0cfba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188147 Malicious code in multiverse-pavo-dependencies-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bb86e4fc7d6abeeb8acfe3062856a25e160c76e9ab903a8caa83445b6660ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186272 Malicious code in concurrently-ultra-protractor-paleoceanography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ac6469b7fc8ca0aa3812f2e8c20c629f6f386ea3ef2bacd4759505f1bdff6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186888 Malicious code in exec-markdown-avior-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1422f2c4e3c9593d29f828fbdb6f4fec9411dbaf4dcae7befd206792eba11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187325 Malicious code in helmet-pegasus-non-blocking-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14468cf08644b774f382415ed7ea9da2eca47006b532d6e5389e4ad5a9f45130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186436 Malicious code in cybernetics-configstore-apex-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c121f2ac61329cfc82b187f2ef02b7155e09ae61f6f84001f029cadb181580e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188935 Malicious code in public-dog-secure-user-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b3ecbfb521f54bc0a2e5f288dc76d1fa2de219c9ce457fa24196b94a7abd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189843 Malicious code in tectonic-pegasus-axios-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccff1f983b671288870e7ba8007f191969e1bfa8964d96d55743f322876d114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187997 Malicious code in meta-code-debug-key-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c44349ff42d4f48dca55e6eede52c18fd580f1050b7cfe7ef57d36b8602a3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187610 Malicious code in jovian-development-meissa-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368fd919ca26defdbec74d1137345199e4f402a0faa4c12e098c42d47af0bd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190150 Malicious code in view-omicron-unix-compress-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d86eb2e159a609113cfc2efc8435ff741a9e4a3d864ae507fe6a729dd0058b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188876 Malicious code in prompts-xanthus-blitz-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5254336ae396f90fdca8d9a98e3c45ded6be01d1e812733bf65f8d8a93c58b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189868 Malicious code in terser-sequelize-oberon-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac1c00d3c960ca9febe5f3d2a666ce6739ffd7071f21f9b258edfa785a39a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185701 Malicious code in await-throw-psi-simple-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937c92f1846343ce1e7e08ff398c3ef8339757e31ea3f856fbedb5d32b508cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189248 Malicious code in rimraf-quantum-csv-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9909070a68830c6d663c79812a272f46e552253bfb360b94ab3ec3234e687778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186701 Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa590854af1589f753368b9047a4503bc64b6412f3131f3d2bd13cf72a2f6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189565 Malicious code in socket-decrypt-tau-big-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849529486d9d0d589a18e25c834f7a59aeec5d0fbfd60317298188a31ea6ec62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187616 Malicious code in joviology-exobiology-antares-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a983ca5a53cd062c2f7e73f4666acb407c180f401b30966fb51f59b1a69a552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188861 Malicious code in promise-jovian-cli-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7920e2648fd98b014ba6e5691d3aaa8d488968c54a9a951d7f0f09354f62de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188678 Malicious code in phoebe-taurus-xerxes-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ce33902acb11575c7df090bd0de3e13592b69b1c04fc0393bb8dc491e30e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...