MAL-2025-188568 Malicious code in parsec-build-nconf-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595407dabb110959c49e151c6feeedb533e80313ec87ae8e34d80792d2dfd6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189491 Malicious code in sigma-try-deserialize-slow-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa134277639263f6619b38cf6bbfcabf6eb3a6b0fcf40df08f3f58df3e53a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188840 Malicious code in procyon-aurora-zenith-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee9d82155772729a89d4891311cc4f51a4cca870e1ed4af8058e7900dfc6f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189297 Malicious code in runtime-promise-assert-async-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc1992c047a8d0c1a09bf957a23e5dcf557eeb8778a576e311694f9098eac19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185867 Malicious code in blueshift-standard-altair-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2495eefe689d12164788cd5f8932194479b7babae1155e232d3b3ff8d369fa2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190327 Malicious code in wind-sun-stub-function-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f4b5d1fd036d698bd418cf176c93868ca1ef60e4582665fcef014f84bccac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188787 Malicious code in postgres-asteroid-readable-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde9ee609c1893f744ce44f7e17918ae0bb056420c1a91a06cf22239e5736047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190161 Malicious code in virtualize-cache-cloud-cat-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9eab5d5a3bb370cb101f7ee9bb7fc97ee9ff9c07c7e0182e1d89cb76688156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189694 Malicious code in string-crust-exoplanet-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607e2f5aeee990d1d2e3b76b3468cde2ee84ab17224b598c35f9804f65bcc526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187499 Malicious code in integer-kappa-sigma-double-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5566ba2f350927d21b27f4360f63f302e2bc7d0db732981ccd4b04a114ae2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187136 Malicious code in gemini-fornax-commitlint-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82bb46f3ff203ae75ff16f3fe07423446d548e769f8914e5a85b752673724382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186061 Malicious code in centaurus-farout-html-webpack-plugin-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f90a93fb08acfd5f7fa33fa6b6f7fc638d17fe538b4201be97e4fd9c7c056b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185976 Malicious code in callback-jekyll-public-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37871c5d8d32001ecc33cfcef2b8297490b122f158b68496524289819179f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187615 Malicious code in joviology-betelgeuse-saturnology-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d254b9514fd3339b54435bc06e5048cce06aa32590ea9021ad1e864405463a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187205 Malicious code in graphql-karma-cluster-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad37a1bc3bc4069bfd4867fc32ef836f405f93fe38cb337fd1e5e922bda5076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185521 Malicious code in archaeoastronomy-lint-staged-polaris-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ff83f7a5d6fc103e22f1e1f849ed6afdf59b479690cc50d9b75086d617db1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187081 Malicious code in gacrux-dorado-impulse-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65b3ff1c02ec4218b6d3cfd1acef8705073c0a75768296613710e6fd716088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187320 Malicious code in helios-webdriver-mocha-superposition-phylogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa52991d1dbcd2f6889af5503b80d384df7b867c03de23959b38644f8ce0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189672 Malicious code in stop-cressida-prompts-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb962d5b873cf65209cbbdd3c78b29f2fa140fe48dc0cefcdabd5d10426b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189869 Malicious code in terser-subscription-kuiperbelt-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532199655a42d0bf32e8d6cc375b714b6858799c46c26c21f4f6bce0f38d60bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...