MAL-2025-189645 Malicious code in standard-browserify-petrology-oscillation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550e1960bed57130e912fd8862bdc80f4f480552d06d2a31443f154526c8e613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188410 Malicious code in old-stub-xml-deploy-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e8f422e088bab75c4abb1e298f807dcf0c370c443f55e40042e701ad51990e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189765 Malicious code in supernova-eridanus-radiant-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee3338ad4519b8b64d9dfca4fe1ba0f2248713067c8006e90c89bfa27497b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189984 Malicious code in transport-command-tachyon-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0edf236c6cd49684316b7dc0c0aa1202a6536332e740642610fe27705c86625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185620 Malicious code in async-gridsome-xanadu-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a279895093e63b7653ef1defaee79c1cb92b45475d3a6c650d3ca4ed7a056fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185626 Malicious code in async-proxy-dog-refactor-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78283fdf99d15a789e89ecf764e0adce1a1d5dfcc1e09a6d26d5eab8b9f4cc58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188023 Malicious code in meteor-fermiparadox-pino-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4475a2700a3887c2ee6f081004405d01e2a1578c2ef22298f54d0b30c7a1993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190147 Malicious code in view-deploy-scale-promise-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96480d65642dc0564974939eafd6126129e7f8b4e9c3845b878bc9244ff62916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185986 Malicious code in callisto-enif-cryonics-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1cb08800e2395ac2ce2014130ec27002e68fd1d04853aac2157234a70f9542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186670 Malicious code in easy-interpret-big-proxy-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e1a4cafec6bf1cf5e6e657300eb2f4ec854809b9008a485341088d0b0bc51c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189856 Malicious code in telesto-publish-oberon-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6837a499af3bd764db78016d59ed3b3b1fe3f57a03f81847910a466b622002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189936 Malicious code in titan-despina-zenobia-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5ee25ca20a09d9abb7fc1a6d770bb3c601cf9ddba8f4d1880abb62fee026fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185885 Malicious code in bootes-terser-local-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f9962ed8b60b0020ab4fb27265ea77fbee4bb93d02926c16251a8bd5c9c41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187384 Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab15840c7162a1c78bb10f8ff332b175c7f6472daf912e63eb81d372dc63e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189432 Malicious code in selenium-neptunology-nucleosynthesis-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b5ce15902953e8f3b5533e6afd805d051c541901105d6bd4e8719cbb072f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187817 Malicious code in lint-staged-superagent-eridanus-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066dc6b85c08093514728ad74577e54a20edffbcf7d838638c2e8ccbdc1dfd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188772 Malicious code in polaris-winston-cryonics-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5e7d42f185ed3a6589e791dac133bceb2f0d294c95c473ef0661645b658ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188057 Malicious code in mira-flare-xanadu-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19dadc6485b18b7fa5b6dc9ca4de5a308581e67d19426f270de042a0861417ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189010 Malicious code in quantumfoam-dysonswarm-io-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d4c40ddfac96db4d16617d8dbd26b31056e7c745f29098ffc857d010c1e67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190171 Malicious code in visualize-decompress-finally-abstract-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96eaec8af9fa8b01c9bdf1bd478313f22e297e828753a7e086ece4042c294b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...