MAL-2025-186627 Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fb944cc269795d653356deba7764bb80e34801218d14654f3434c39296c5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190123 Malicious code in user-boolean-info-decode-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5255d33f074e4f791a5dccd9e6d57315c6fc8883da3342c9b4a0a9ca8c5fb24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188284 Malicious code in nightwatch-firebase-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f114266d957185bc93c8b22586ca07de60a7351df40704e372b30ce491e652d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188995 Malicious code in quantum-computing-eslint-plugin-zephyr-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e88f3f76a14f5bc81391f34d6452a089594d0603cf85c69cdd178397bc3c36c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186107 Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c89b3115fa6923864030d78898e8602e4c6c3e8398a4d8729c6a880b206927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185916 Malicious code in browserify-nodemon-proxima-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8fe0178708beab3a0e8eecf0b864a676279dca80cabc51fa9d0f1f2d2579c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188614 Malicious code in permission-permission-link-monitor-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d431a409565d9e8eeb792724e8d57bd258eeffbb797a03748a52fa0965af76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185616 Malicious code in async-dotenv-pino-pretty-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3d4a572f76bbbe274534a67699ee258acbbf21283e21f9c8957d006040376a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189729 Malicious code in sudo-reject-mu-proxy-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71bd21ebc82601b1500c1ec0b38beaf261822f483579359312b433a31d3a139a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185840 Malicious code in biotechnology-halley-redgiant-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be587c196677b01b0966672ec9c47b63943494c056f4e7e118ca6ae67eeaa0b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186481 Malicious code in darkenergy-janus-firebase-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27594d376e7c3488958eef232401459e1718d977f3910af62ff4d9fc27a3551b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188059 Malicious code in mira-halley-halley-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d654ea2429bda07d6516d7e6c195f982a2f1fabbcd309bcdf070a02a7322d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190018 Malicious code in typeorm-postcss-process-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c294fc466452d2820a486df7e32926bbee267587784977a5dcfde6218f0c0289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186862 Malicious code in ethology-subduction-foundation-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845f1cb6960a58c886de2924a1338800f1af16f5f973e47b7b8d751097e2b286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187034 Malicious code in fornax-materialize-sails-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e47cd906f3eac5ef7031e9e276accc0a01baa2d72f585d855e5404f4ed629f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188355 Malicious code in nova-primatology-paleoclimatology-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e50707d6a5b16bd335ab51dccc814ae5c912f400b88796143a03687f138aec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186379 Malicious code in cross-env-cross-env-photon-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb2fb8727e1f7724d5accad4dc8d450ac3e5735b535600cb2fee7ed81e14ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185538 Malicious code in archaeometry-rollup-plugin-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dcfdaa9a4222852d826a3e0212b6a3584a79729124a8ff9ee1178222bb3de18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190372 Malicious code in xenon-graviton-gravity-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5cd3c1a720ee5addd563d7161ef6e801e83409e8f804fd7355ef0ddb38c2fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190006 Malicious code in troposphere-passport-dotenv-safe-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c01f9df83ebb0e7828aa0d38881a944a7b2fa65e82e0b8ec97a8410499067c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...