MAL-2025-185478 Malicious code in antd-node-sass-zenobia-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a6abf162f2ff33e0e531ac0bacacc886441b2faaf429aec9919956afcd7939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185960 Malicious code in byte-runtime-easy-promise-transpile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325875c77ac94cceec81e2be9da4d8c3435e647db500e4d50cc6529b1dab65a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189315 Malicious code in sagitta-jest-orbit-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d53a4bd4227f567dec059a9f2b201e3dfe39d01c0295bb6b17cd914e8e4d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189591 Malicious code in solis-semantic-release-pm2-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f3fbcd8cfd3f79b4077a30db2336a9949bd3aed84da84464d9498779874eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190165 Malicious code in virtualreality-algol-loglevel-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6afa3c2fb3a388e8347fc64e1d8b54a9008e945b4aae230bb4486ce7eec8345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190278 Malicious code in webdriverio-jasmine-dione-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6aaff2bb3a08dfb706081881b34cb93ca43e0b8c54aa6229078a2bb1f5e1991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188322 Malicious code in node-sass-nuxtjs-octans-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15489028a7c893c81b5652d7e2f95d596441e527e1ae371106f50eccccd6388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187464 Malicious code in inflation-apollo-rocket-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b1247c5e72e553ae03620ece5fc27af309bb24287205d0b5f511c0c7a50f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188793 Malicious code in postgres-soap-apex-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b86a98a2d226d8686f0c0bfd665e59b9bb161862d45d5139f58b48ca662cedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189444 Malicious code in sequelize-hawkingradiation-protractor-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4571fcd4edc03bc69c09205dd532e4160f422b4b3a5e822f069e5c6aa5e483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190406 Malicious code in xo-indus-procyon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127166ed7ac52806beb38f75aa00eb00ab30d661f9b3ff074fdf4d093831f339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185705 Malicious code in awk-minify-minify-proxy-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1208fc2ae9856f039e6e138fcb07fbd979361c684b17686c6b35f22247a99bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188564 Malicious code in parse-kappa-void-proxy-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3590151b0daf282a28b49f4a481548cae0c6a1f81a39e16698dcd0c0d72bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190159 Malicious code in virgo-joviology-proxima-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fb535baf3318b23fa0b62b4cd4c5683c8431b361755d1cb4e8290c76a46c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188813 Malicious code in prettier-stylelint-zenobia-loop-paleomagnetism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcef3a94c77587648874ca5cc0a096f2a5a9a9c7b55cd912545c46394ed299ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187024 Malicious code in fork-webpack-kastra-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa08ae10f43fded7688f06c4437636a450b0f4c86bfd008f64545bbd3f8d558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187484 Malicious code in innercore-magnetar-xerxes-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90a43fa256d202c4b4ee74f02897d32a09d8ac876f289dd3ec2a3b0b4255285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187222 Malicious code in greatfilter-nova-morgan-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a41bbd5a3eb7b2cf34d987772360f300333ee568f6821c4565123bbb63346d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187912 Malicious code in magnetar-thermosphere-nconf-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3bf2c4086422c764867c661ecf141e5cc312b3f3356cf4be94e25ab2554769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186620 Malicious code in dotenv-safe-electron-delphinus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d491829a6e7f4d4e2562199356d4961f3431ce86074cf26882ae975582f4b4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...