MAL-2025-186262 Malicious code in compress-async-rho-boolean-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47a72962d3c729d5d4253ec9d28d30df0480c577add110900f74126b32e3a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189852 Malicious code in telesto-dotenv-safe-webdriver-mocha-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d513eeaab93246ff546ef260475c4d48574ff1738e8b1d59e46c843aaaa18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185354 Malicious code in abiogenesis-cli-start-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8fedbe24747fad784a07c56896720db43b38226d30e4d557281b607426d706a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187903 Malicious code in magellan-gravity-solarnebula-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3462e73d45c74f94a7ed03e5a2684f899b513c79d7d44b35e47dbfbcdbd206b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187909 Malicious code in magnetar-geochemistry-remark-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df78ab37688f2bb7ad5ae145aa4a41be2f60db4bc5c2dc265ba44ce7565923b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189501 Malicious code in simple-load-info-error-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847a1870fc15c117080113e104ecb50fdca612614cda464bf9845173229fb2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189557 Malicious code in soap-odin-config-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5fb11eb83b83b17a16cb7ae6c6f075d0c88452e612dcd5a1b07ea5cc8eab15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190483 Malicious code in zeta-try-stack-alert-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae4c0f872d31213b4fb2f6cb917a89f8c70d5324e237c9c3dec9617b9b4dddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187679 Malicious code in kernel-visualize-meta-import-transpile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9223446c8456063e02bf6a2c8259e55d37e8b0523946e7d529d719fa47b3a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190063 Malicious code in unuk-cygnus-lyra-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f02499efacb13dfc3d8678b122522cd5ade5bb2985d64d65180c2aae141983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186207 Malicious code in colors-request-xo-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1498b0185b55cab24bef95e606502bbbd2afbfe23c40d14a9b5f91cec7b05faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189000 Malicious code in quantum-computing-technosignature-ablation-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac35117eec102497f8ce0b0b5acf8d3e1e4d43654662f1ab0ee8af683ebeaf39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186201 Malicious code in cold-old-monitor-zeta-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f605ed4e638cfcb600b10d7ae557001f37d7c6fcbb1353943a4f09ea29689a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186606 Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189449 Malicious code in serialize-bash-authenticate-execute-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bafd6e5977868e79709452bf04495a7d1495d540bfd749ef73bab2a8aa8c478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189643 Malicious code in standard-apollo-tardigrade-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40754cfd5d3acd3d0b0766de8c414360da01d745f7dd08b9ca8e853ae6750b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186312 Malicious code in coronalmassejection-express-stream-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb7ccafe494f15bf19a6e786f7e944326261f0edda3cdef4b98fbdf9710c04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187035 Malicious code in fornax-phoebe-jabbah-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab6a4c8a169e333e9defa80910133b4b619a071f3e744ce182a3d24ec5ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186630 Malicious code in double-benchmark-pipe-hash-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693bc7ca615b1cd5a5525161fc2c67df2038089b984d721e39eaf4b39dc51b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185758 Malicious code in bash-runtime-log-static-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21062ee5a5c866a7a6204e3bafb9fb0218741fedf29e9ba1781673b1216dba29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...