MAL-2025-190374 Malicious code in xenon-proxima-whitedwarf-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8a57d1e9a393d211b58a86fd5f7c5e3a2c390cfb91db8a41ee8f156a303465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188725 Malicious code in pipe-resolve-signal-uglify-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c40780bfa0a60a0f11514d456c9de6b44db34fb75557dcc422ac8974ca8ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190464 Malicious code in zephyr-hyperion-cypress-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c3120a7bcc6b643e7ee8de6d0ac0d7396a197a63da497db369d04c59ebc39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185856 Malicious code in blitz-eslint-plugin-csrf-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0d2f8d4c99e5664b2a7e748d026eec2b2ed66b1fae1d4a24a9af5dabf2fdae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186961 Malicious code in figures-archaeoastronomy-hadron-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ae70a518089c6ceb6593edb3b798ea5e1e93fc9ede587652dd6e24c212556c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186636 Malicious code in double-uglify-long-static-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86cbddf969fda2c0a80a2252a875d61720e0aa7aa2b2a5725fd102e01d1f0c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189453 Malicious code in serialize-minify-decompress-mu-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1746b39844b7d17daa12b977f8d00dbc6391d85c4c41c6d6de6c58b2cbd8c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188931 Malicious code in psi-sudo-key-simulate-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee62d1636d2e3ede1d70eea831e93d894b9e64f3fdca81500b89f12f6071f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188848 Malicious code in procyon-procyon-xml-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f22cb07a609a28b005e4e95f1395efe6c1caa1b328526d3412489ff07456b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187115 Malicious code in ganymede-volcanology-meteor-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439f5aeded04421261b5e44959256e95a019859e49ea507d43c2521ec92cdfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190329 Malicious code in winston-boson-publish-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5443c2030097f72cca3da1bb12aa17e11ac24d30b75d4b58b456b05ae958239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186171 Malicious code in cloud-analyze-spy-thread-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f83668a539b397cbb90f7ba290532b55a4fb54c934b34aaade5877b673db5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188168 Malicious code in nanotechnology-nightwatch-elara-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f74e609ccfef362deeb90f5f9f572a1dd1e992582b2eb66b631cefdfe791625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189802 Malicious code in tailwindcss-bulma-vuetify-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dae4b6617c23b94996978d683edd81cdfa0c3dea5d59e4276843468c90769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188296 Malicious code in nightwatch-spawn-leda-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7a1045067738f50113be83874dd4bbe0afc4ee5fc89b8ca6d1f619c3760744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188501 Malicious code in paleobotany-nightwatch-epimetheus-spectroscopy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae70f0bfb1be3f0979973d806c8c3f2e10038776a5df86823b05868b76e4d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188335 Malicious code in nodemon-meissa-outercore-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2e23c45539583f659e07b8c25c6f64355c7809af168ed58fe5b4b1e9e94297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186494 Malicious code in debug-cache-report-cache-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548a5857bd7c92380811c367a8bd3c184e43d7536080c389e556fed63330059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187979 Malicious code in mensa-fornax-chariklo-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bea88bb2438959eb72a95c8ba6f1c94ccc913f35cdb84ec7d3884727d656df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190197 Malicious code in vuetify-firebase-darkmatter-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7cb31503b963b956ff20f68210ddac6120ba9463afed7019619da8b0fdd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...