MAL-2025-186584 Malicious code in development-xerxes-dagda-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7042445332cc153f5065a7dece3340b416923ec1504216b77f9ecb81566a7d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189220 Malicious code in restart-jabbah-module-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754f89bb05d71cb06dabc0ad38d390187aa8c02187779be6e45282fc31257f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185838 Malicious code in biotechnology-draco-webpack-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37351f9d161bded8244999f286d5a8e7b5a01f0fcdf5440fb810ebbaf8eaaf8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186808 Malicious code in eridanus-hermes-mui-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2664398dc9b5987135c7f0b48309f9a0fe148b2e57829465f8e0fab3c3bbc987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186355 Malicious code in cosmology-levels-terser-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288be03c8843b42fcdfd629ae8d089e419583efc975261b79fa3e9b75d609a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189358 Malicious code in saturnology-astroinformatics-release-it-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3567225aede0b7578ed93233235ca67fe147bf5c5093c18d0dac200a90c12a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189764 Malicious code in supernova-equinox-singularity-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f56679cc22b11e8ed02364f4ec1180760f81d8fab695bc66756a0de7aee591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189991 Malicious code in tree-awk-notify-beta-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a4475634ccb865c954dd93557022a7dd70e0549691c1cc71b59d788988cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186303 Malicious code in cordelia-async-chariklo-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1082e6a74aee52ffd5a2da69b0c99b63e1819f99a35a627fdce7a4b7582a049d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187700 Malicious code in koa-higgs-jasmine-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94744e4363382314160fd2c7e5b498755be2a10ae9e8fa7b684813a28d90a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189492 Malicious code in sigma-web-unix-interpret-earth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de47f3e1713cab92f3460ce1c317c8f9f19aa0c38b48608a6e6f8acecd99a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186181 Malicious code in cluster-magnetar-leda-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efac9c5584d5f9d128d2ef5be924c45f05b9f99c926ec52dd6d63c49abc7e2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187372 Malicious code in html-webpack-plugin-atlas-global-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76c400c13c978ef6cec8cf7e638527ede28cbd33c8bdda65e4c91e8e97c489e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186509 Malicious code in decrypt-info-meta-table-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4883bdd1cd22e99353350c8cdb2c98e0bd344ac3801dc0999b5d205d66f663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185893 Malicious code in bootstrap-solis-bulma-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3c4b90b728e10c24b350f3bbaa8da21ea46f25f548e1c3a7dbb67672704c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187611 Malicious code in jovian-less-loader-draco-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94189a4b8068d471674545d9a9ea66454a1547bf0c8fd73e8f0180d9b2200d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189120 Malicious code in refactor-private-table-finally-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7fe350226f8e4b7671ddae6faacdaa25fcb6d3a536a3576ea5fb7a4c42e214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186853 Malicious code in eslint-webdriverio-mutation-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a6292cce1f88ab7dde9bbac28ffb5bcef257849fd92f06c8f492a70f80981b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186166 Malicious code in cli-holography-bunyan-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99709cf279a1a0f87117719e8b2cd54765f1b9ed84a6db8465fdf46399aa064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189610 Malicious code in spectron-mini-css-extract-plugin-enif-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bf4632685f048e884c1d50e6b8ad6399db3c7078098bf8b61b8d61dd7d4b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...