MAL-2025-187891 Malicious code in lyra-janus-spectron-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f974c1d7489ce1d1c09c87907c9d339d8bc8a156c498f4df32f39841f470b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warn-shell-async-virtualize-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2cb078aa4325f43d18e8c37fca0a67c9e6f5a8d01a809b7f99bedd3f8f53334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-reveal-md-registry-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ad89d8331122a15bc7cf5f8f5bff6b20a31ed3a2ccc02e5573a1f7b14248ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187574 Malicious code in janus-hapi-ganymede-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c51d1d80490a8edab4326366977f4ecda45c1d5cf1496de3d5227d9066fd684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188406 Malicious code in old-grid-permission-gamma-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e536f38f9d7318cb83d2c050cb34a8e1c0efda5109e56d6701c3335ebf74ed16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189645 Malicious code in standard-browserify-petrology-oscillation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550e1960bed57130e912fd8862bdc80f4f480552d06d2a31443f154526c8e613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187325 Malicious code in helmet-pegasus-non-blocking-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14468cf08644b774f382415ed7ea9da2eca47006b532d6e5389e4ad5a9f45130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-miranda-helmet-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53def4b573229bf498847e43f7136c42519ccd7b938ca0c0ee2266bca66c1fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-decoherence-xanthus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302cb9295281a82475b3d087e5c9d61e6f97dff44cc081a850b4044c5e0991c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-node-sass-graphql-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc26ec30e9a3ace49a0ba1f6deef1a416fd2b984258bb5e7f2a2d6abe3c0b3f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188834 Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da84a8b179398617b8595ea7e18eeda5d4da7cd2cf8ea395a71a7723e12d8124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189940 Malicious code in titan-link-wolf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5635cb19cc5d81c41aa823641a3e6ce5b8e942e8d03a61f99c85afc4412e62e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188367 Malicious code in nucleosynthesis-backend-local-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f0e575dd8081f33d306cedbbefbb2c089c82765433643badb89e418944ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189419 Malicious code in sedna-semantic-release-meissa-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23de4acbd096d7b2e9443bc9c267dde65252e7ab561fffd7d05d00627a2595f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-mutation-commitlint-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd2a460ca0073a03ed3c72112f9aa3039146098c9d9b9c319caad2451f7ab58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189775 Malicious code in superposition-quasar-iota-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdfc8778c8d71e0b855f75cb949b20b7db9ea2d330350f1e624393f65ef02ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187754 Malicious code in less-loader-grus-void-biosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eb889dc1cf69b2085a517f688f0af0a888445aef6063056bcdef36537a018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in book-boolean-runtime-grep-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248fd29ebd39c973c6e898d5026a9cbcb91abf2a85b678c558d7b07f266a7c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-graviton-webdriverio-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbeaeed465424e52a3a1c461e253d7aa23522c4d71e215bf651ce7fc5cf5a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-json-husky-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478b97c7a91f7c4306ed3e704e7d987f5ad1bfcf878a6b3f756ab08441f24198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...