MAL-2025-188474 Malicious code in orchestrate-process-cache-data-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7471b0298fc61ae4c462894f9c3877691c475883df2c72ebf084c57d16654a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189590 Malicious code in solis-promise-janus-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3184b211abe21fa68abe734f23a5e3a2974e348839412724fd29abecabeb8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188313 Malicious code in node-optimize-table-alpha-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f260e0fad0e2b704b1d9ca6562b1bf2b8263f6a59ef27a984a33fb7e91cb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188094 Malicious code in mock-string-simple-final-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38d5a29590fbb31cc80dde1e3ad6cfd08ab4787dfdf5aef7c978472bb42c5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188149 Malicious code in multiverse-terser-webpack-plugin-vulcan-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3baa1735030fec28c869f9415dedd3770acbed82aa70c4034145b69388e3ca53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186870 Malicious code in europa-lynx-janus-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ce887dbc94c1be94b6425244b58969751b2008b1b2db5b16d73c4f5eba3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187659 Malicious code in kappa-notify-web-encrypt-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adabf06362cf23d6c3eee9d92b084952fd8949a52f6b30a787608914698c108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185472 Malicious code in antares-planckscale-helmet-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f72530dd247b457218e0e4f8916ac3dc415a8a2eab4401eb9bd37f23deb50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186255 Malicious code in commitlint-publish-fornax-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d0a6efe42d239d3fb4ecfc887966e3ba7f79c8cde0ddd056df53c7460a5ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186293 Malicious code in container-tree-signal-notify-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71d5038f64d6e372dc504ee04667b316a274a372b8dddb45c2cd8c93fd779d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187373 Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188272 Malicious code in nextjs-weywot-bioinformatics-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21c7bbb3589182010dd1d9bcfb88841beb2fc6f908229b0a78e48f24a75fb9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189562 Malicious code in sociobiology-castor-package-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07b2b3e48f63280e2b3b47fe00bdbd1401a9b8ab4b8ce7f4487d3c8669bf24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189788 Malicious code in sync-vega-apex-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7049cee782d42510430e26832fb304bb48636354de220eb85f797b763b0df0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185622 Malicious code in async-iota-pavo-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1b1f4251a47dc183f09a26f155bd0931ec87d8606fb9177ab5ad1f58112403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188384 Malicious code in object-chi-yaml-authorize-zero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34beeb136dccab96c3b1fb568433900d04536d8ac74ee3478fa87a4b3bae1716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187248 Malicious code in grus-schema-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5015d8e05db5097f2ab0758f0d0d42285be94e469cecf52668d3df1eaf57c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189894 Malicious code in testcafe-chalk-magellan-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185737 Malicious code in bad-old-deserialize-bundle-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdce2dcf4be67b168c96fb9a58af64b1b400ef7ee5345b993348f76fcefd3c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188802 Malicious code in prettier-plugin-markdown-exoplanet-saturnology-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5035fc7034177361a11d4b4e27a3fba157faed7231117410427c76e9eb30a1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...